Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR

Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal

Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR

Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR

Information Disclosure through the REST API in Splunk SOAR

Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR

Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR

Structured Query Language Injection through the REST API in Splunk SOAR

Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR

Path Traversal through App Installation Tar Extraction in Splunk SOAR

Information Disclosure through the REST API in Splunk SOAR

Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR

Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR

Path Traversal through Automation Broker in Splunk SOAR

Missing Authorization through Playbooks in Splunk SOAR

Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR