Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security

SPL Injection through the REST API in Splunk Enterprise Security

In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS)

In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation