Splunk Cloud Platform.

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site request forgery (CSRF)

Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Path traversal

Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Server-side request forgery (SSRF)

Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper Access Control in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Improper Input Validation through Classic Dashboards in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Cloud Platform
• Insecure deserialization

Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Sensitive Information Disclosure through Log Files in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Denial of Service through coldToFrozen.sh Script in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper Access Control in Data Model Acceleration in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-377

Improper Input Validation during User Account Creation in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-176

Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Command injection

Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service

Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Server-side request forgery (SSRF)

Improper Input Validation in "label" column field in Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Unauthenticated Log Injection in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Other injection

Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

URL validation bypass through Views Dashboard in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Open redirect

Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Open Redirect on Web Login endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Open redirect

Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Server-side request forgery (SSRF)

Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Improper Access Control in Background Job Submission in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service

Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site request forgery (CSRF)

Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Sensitive Information Disclosure through SPL commands

• Splunk Enterprise
• Splunk Cloud Platform
• Weak cryptography or TLS

Information Disclosure due to Username Collision with a Role that has the same Name as the User

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site request forgery (CSRF)

Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service

Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Persistent Cross-site Scripting (XSS) in Web Bulletin

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Low-privileged user could create experimental items

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Denial of Service through null pointer reference in “cluster/config” REST endpoint

• Splunk Enterprise
• Splunk Cloud Platform
• Memory corruption

Denial of Service (DoS) on the datamodel/web REST endpoint

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service

Persistent Cross-site Scripting (XSS) in Dashboard Elements

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Risky command safeguards bypass through Search ID query in Analytics Workspace

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure