Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-22938Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise
- CVE-2023-22937Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise
- CVE-2023-22943Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK
- CVE-2023-22933Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise
- CVE-2023-22942Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise
- CVE-2023-22932Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise
- CVE-2023-22936Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise
- CVE-2023-22941Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
- CVE-2023-22931‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise
- CVE-2023-22935SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise
- CVE-2023-22934SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise
- CVE-2023-22940SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise
- CVE-2022-43572Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise
- CVE-2022-43570XML External Entity Injection through a custom View in Splunk Enterprise
- CVE-2022-43569Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise
- CVE-2022-43568Reflected Cross-Site Scripting via the radio template in Splunk Enterprise
- CVE-2022-43567Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature
- CVE-2022-43566Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise
- CVE-2022-43565Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise
- CVE-2022-43564Denial of Service in Splunk Enterprise through search macros
- CVE-2022-43563Risky command safeguards bypass via rex search command field names in Splunk Enterprise
- CVE-2022-43562Host Header Injection in Splunk Enterprise
- CVE-2022-43571Remote Code Execution through dashboard PDF generation component in Splunk Enterprise
- CVE-2022-43561Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise
- CVE-2022-37437Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation
- CVE-2022-37439Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input
- CVE-2022-37438Information disclosure via the dashboard drilldown in Splunk Enterprise
- CVE-2022-32158Splunk Enterprise deployment servers allow client publishing of forwarder bundles
- CVE-2022-32157Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads
- CVE-2022-32155Universal Forwarder management services allows remote login by default