Splunk vulnerabilities
347 CVEs and advisories name Splunk as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-32154Risky commands warnings in Splunk Enterprise Dashboards
- CVE-2022-32153Splunk Enterprise lacked TLS host name validation
- CVE-2022-32152Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default
- CVE-2022-32151Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default
- CVE-2022-32156Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation
- CVE-2022-27183Reflected XSS in a query parameter of the Monitoring Console
- CVE-2022-26889Path Traversal in search parameter results in external content injection
- CVE-2022-26070Error message discloses internal path
- CVE-2021-42743Local privilege escalation via a default path in Splunk Enterprise Windows
- CVE-2021-33845Username enumeration through lockout message in REST API
- CVE-2021-31559S2S TcpToken authentication bypass
- CVE-2021-26253Bypass of Splunk Enterprise's implementation of DUO MFA
- CVE-2021-3422Indexer denial-of-service via malformed S2S request
- CVE-2016-4859Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior
- CVE-2016-4858Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.
- CVE-2016-4857Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior
- CVE-2016-4856Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with admi