Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

OpenSSL Information Disclosure Vulnerability

Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server

Improper Adherence to Coding Standards in Splunk Enterprise

Improper Neutralization in Splunk Enterprise

Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correctly performed and…

Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled,…

Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote…

Improper Access Control through Embedded Reports in Splunk Enterprise

Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise

Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certificate stores by default…

Improper Control of a Resource Through its Lifetime in Splunk Enterprise

Improper Authorization through the REST API in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway

Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise

Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise

Remote Code Execution (RCE) through Federated Search in Splunk Enterprise

Path Traversal through the Lookup Configuration REST API in Splunk Enterprise

Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise

Code Injection through Splunk Web Manager Configuration in Splunk Enterprise

Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise

Remote Code Execution (RCE) through the REST API in Splunk Enterprise

SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise

Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated…

In Splunk Enterprise for Windows versions below 9.2.3 and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could perform a Remote Code Execution…

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through…

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then use to serialize…

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user could create an external…

In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data

In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply

In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk

In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR…

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user can trigger an HTTP response splitting…

In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the…

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass SPL safeguards for risky…

Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature

Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise

Risky command safeguards bypass via rex search command field names in Splunk Enterprise

Remote Code Execution through dashboard PDF generation component in Splunk Enterprise

In Splunk Enterprise versions before 8.1.2, the uri path to load a relative resource within a web page is vulnerable to path traversal

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to…

SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

Path Traversal through Search Head Clustering in Splunk Enterprise