Sensitive information disclosure in REST_Calls logging channel

Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise

Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page

Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise

Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise

SPL Injection through the REST API in Splunk Secure Gateway

Improper Access Control in Field Extraction Management in Splunk Enterprise

Improper Input Validation of Index Names through the collect Command in Splunk Enterprise

Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise

Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise

Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise

Improper Input Validation through the collect Command in Splunk Enterprise

Missing Access Control through the REST API in Splunk Secure Gateway

Log Injection through the REST API in Splunk App for Splunk O11y Cloud

Improper Authorization through the REST API in Splunk Enterprise

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

Information Exposure through REST API Endpoints in Splunk Secure Gateway

Improper Access Control in Data Model Acceleration in Splunk Enterprise

Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app

Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Missing Access Control of Saved Searches in the Splunk Archiver app

Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise

Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway

Information Disclosure due to Username Collision with a Role that has the same Name as the User

Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard

Improper Access Control for low-privileged user in Splunk Secure Gateway App

Low-privileged user could create notifications in Splunk Web Bulletin Messages

Low-privileged User can View Hashed Default Splunk Password

Role-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results

Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise

Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise