Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

Sensitive Information Disclosure in Splunk Secure Gateway App

Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

Improper Access Control in Splunk Enterprise

Authorization Bypass in the Data Management REST API in Splunk Enterprise

Path Traversal through Knowledge Bundle Replication in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway

Stored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk Enterprise

Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise

Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise

SPL Injection through the geostats Command in Splunk Enterprise

Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise

Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise

Improper Access Control through the REST API in Splunk Enterprise

Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

URL validation bypass through Views Dashboard in Splunk Enterprise

Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise

Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise

Improper Access Control in System Source Types Configuration in Splunk Enterprise

Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise

Host Header Injection in Splunk Enterprise

Improper Access Control in Splunk Enterprise

Missing Authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise

Path Traversal through Splunk Web Static File Serving in Splunk Enterprise

Unauthenticated Log Injection in Splunk Enterprise

Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise

Sensitive Information Disclosure in "_internal" index in Splunk Enterprise

Sensitive Information Disclosure in "_internal" index in Splunk Enterprise

Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise

Sensitive information disclosure in AdminManager logging channel

Sensitive information disclosure in REST_Calls logging channel

Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise

Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise

Missing Authorization through Sourcetype Renaming in Splunk Web for Splunk Enterprise

SPL Injection through the REST API in Splunk Secure Gateway

Improper Access Control in Field Extraction Management in Splunk Enterprise

Improper Input Validation of Index Names through the collect Command in Splunk Enterprise

Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise

Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise

Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise

Improper Input Validation through the collect Command in Splunk Enterprise

Missing Access Control through the REST API in Splunk Secure Gateway

Log Injection through the REST API in Splunk App for Splunk O11y Cloud

Improper Authorization through the REST API in Splunk Enterprise