Remote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk Enterprise

Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

Improper Access Control through the REST API in Splunk Enterprise

Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Enterprise

SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise

Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud

Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Enterprise

Improper Input Validation during User Account Creation in Splunk Enterprise

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Denial of Service (DoS) through the REST API in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud

Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise

Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise

Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise

Improper Access Control through REST API Endpoints in Splunk Secure Gateway

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise

Insecure Default Access Control List through the REST API in Splunk Secure Gateway

Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

Sensitive Information Disclosure through Log Files in Splunk Enterprise

Denial of Service through coldToFrozen.sh Script in Splunk Enterprise

Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise

XML External Entity Injection through a custom View in Splunk Enterprise

Denial of Service in Splunk Enterprise through search macros

SPL Injection through Splunk Web Form Tokens in Splunk Enterprise

SPL Injection through Dashboard Studio Workflow Actions in Splunk Enterprise

SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise

SPL Injection through Splunk Web in Splunk Secure Gateway

Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise

Reflected Cross-Site Scripting via the radio template in Splunk Enterprise

Remote Code Execution (RCE) through the REST API in Splunk Enterprise

Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise

Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

Improper Input Validation through Classic Dashboards in Splunk Enterprise

Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

Improper Access Control in Splunk Enterprise

Authorization Bypass in the Data Management REST API in Splunk Enterprise

Path Traversal through Knowledge Bundle Replication in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway