Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-23678Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition
- CVE-2024-23676Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
- CVE-2024-23677Server Response Disclosure in RapidDiag Salesforce.com Log File
- CVE-2024-23675Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
- CVE-2024-22164Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments
- CVE-2024-22165Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation
- CVE-2023-46213Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
- CVE-2023-46214Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing
- CVE-2023-40597Absolute Path Traversal in Splunk Enterprise Using runshellscript.py
- CVE-2023-40596Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL
- CVE-2023-40593Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request
- CVE-2023-40594Denial of Service (DoS) via the ‘printf’ Search Function
- CVE-2023-4571Unauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)
- CVE-2023-40592Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint
- CVE-2023-40595Remote Code Execution via Serialized Session Payload
- CVE-2023-40598Command Injection in Splunk Enterprise Using External Lookups
- CVE-2023-3997Unauthenticated Log Injection In Splunk SOAR
- CVE-2023-32709Low-privileged User can View Hashed Default Splunk Password
- CVE-2023-32707‘edit_user’ Capability Privilege Escalation
- CVE-2023-32713Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream
- CVE-2023-32712Unauthenticated Log Injection in Splunk Enterprise
- CVE-2023-32714Path Traversal in Splunk App for Lookup File Editing
- CVE-2023-32716Denial of Service via the 'dump' SPL command
- CVE-2023-32710Information Disclosure via the ‘copyresults’ SPL Command
- CVE-2023-32717Role-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results
- CVE-2023-32706Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication
- CVE-2023-32715Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing
- CVE-2023-32711Persistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View
- CVE-2023-32708HTTP Response Splitting via the ‘rest’ SPL Command
- CVE-2023-22939SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise