Files or Directories Accessible to External Parties in Splunk SOAR

Use of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAR

Improper Neutralization in Splunk SOAR

Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR

Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR

Information Disclosure through REST API Query Filters in Splunk SOAR

Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR

Sensitive Information Disclosure through REST API Query Filters in Splunk SOAR

Missing Authorization through the REST API in Splunk SOAR

Improper Access Control during App Downloads in Splunk SOAR

Information Disclosure through the REST API in Splunk SOAR

Structured Query Language (SQL) Injection through Custom Lists in Splunk SOAR

Structured Query Language (SQL) Injection through Custom Function Results in Splunk SOAR

Structured Query Language Injection through the REST API in Splunk SOAR

Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR

Path Traversal through App Installation Tar Extraction in Splunk SOAR

Information Disclosure through REST API Authentication in Splunk SOAR

Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR

Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR

Information Disclosure through the REST API in Splunk SOAR

Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR

Log Injection through HTTP Request Paths in Splunk SOAR

Stored Cross-Site Scripting (XSS) through Notes in Splunk SOAR

Path Traversal through Automation Broker in Splunk SOAR

Missing Authorization through Playbooks in Splunk SOAR

Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR

Improper Protection of Alternate Path in Splunk SOAR

Protection Mechanism Failure in Splunk SOAR

Improper Check or Handling of Exceptional Conditions in Splunk SOAR

Improper Control of a Resource Through its Lifetime in Splunk SOAR

Improper Access Control in Splunk SOAR