Advisories · Technology
Splunk AI Toolkit.
Every CVE that names Splunk AI Toolkit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit
- Splunk AI Toolkit
- Broken access control
- CVSS 4.3 Medium
Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit
- Splunk AI Toolkit
- Broken access control
- CVSS 8.1 High
Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit
- Splunk AI Toolkit
- Broken access control
- CVSS 7.5 High
Improper Access Control through Scheduled Searches in Splunk AI Toolkit
- Splunk AI Toolkit
- Privilege escalation
- CVSS 8.8 High
Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit
- Splunk AI Toolkit
- Insecure deserialization
- CVSS 8.3 High
Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit
- Splunk AI Toolkit
- Broken access control
- CVSS 5.9 Medium
Race Condition during Model Upload through the REST API in Splunk AI Toolkit
- Splunk AI Toolkit
- Race condition
- CVSS 5.4 Medium
Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit
- Splunk AI Toolkit
- Hard-coded credentials
- CVSS 8.3 High
Improper Privilege Management through Agent Run History in Splunk AI Toolkit
- Splunk AI Toolkit
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
- Splunk AI Toolkit
- Command injection
- CVSS 4.3 Medium
Insecure Default Domain Allowlist in Splunk AI Toolkit
- Splunk AI Toolkit
- CWE-1188
- CVSS 6.5 Medium
Improper Access Control through Role Inheritance in Splunk AI Toolkit app
- Splunk AI Toolkit
- Broken access control