Splunk Enterprise.

Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise

• Splunk Enterprise
• Cross-site scripting (XSS)

SPL Injection through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• CWE-20

SPL Injection through the REST API in Splunk Enterprise

• Splunk Enterprise
• Other injection

SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise

• Splunk Enterprise
• CWE-20

SPL Injection through Monitoring Console Dashboard Inputs in Splunk Enterprise

• Splunk Enterprise
• Other injection

SPL Injection through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Command injection

SPL Injection through Splunk Web in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Other injection

Stored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk Enterprise

• Splunk Enterprise
• Cross-site scripting (XSS)

Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Cross-site scripting (XSS)

Stored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise

• Splunk Enterprise
• Cross-site scripting (XSS)

SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise

• Splunk Enterprise
• CWE-20

SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise

• Splunk Enterprise
• Broken access control

SPL Injection through Nearby Event Searches in Splunk Enterprise

• Splunk Enterprise
• Command injection

SPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise

• Splunk Enterprise
• Other injection

Remote Code Execution (RCE) through Federated Search in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Cross-site scripting (XSS)

Path Traversal through the Lookup Configuration REST API in Splunk Enterprise

• Splunk Enterprise
• CWE-26

Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise

• Splunk Enterprise
• Other injection

Code Injection through Splunk Web Manager Configuration in Splunk Enterprise

• Splunk Enterprise
• Code injection

Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise

• Splunk Enterprise
• Code injection

Remote Code Execution (RCE) through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Improper Access Control through Embedded Reports in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

• Splunk Enterprise
• SQL injection

Improper Access Control through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise

• Splunk Enterprise
• Information disclosure

Insecure Default Access Control List through the REST API in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Incorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise

• Splunk Enterprise
• Broken access control

Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

• Splunk Enterprise
• Privilege escalation

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Hard-coded credentials

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Information Exposure through REST API Endpoints in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Information disclosure

Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Broken access control

SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise

• Splunk Enterprise
• Other injection

Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise

• Splunk Enterprise
• Privilege escalation

Cross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise

• Splunk Enterprise
• Cross-site scripting (XSS)

Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud

• Splunk Enterprise
• Broken access control

Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site request forgery (CSRF)

Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Path traversal

Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

• Splunk Enterprise
• Authentication bypass

Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Server-side request forgery (SSRF)

Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper Access Control in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Improper Input Validation through Classic Dashboards in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Cloud Platform
• Insecure deserialization

Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Sensitive Information Disclosure through Log Files in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Denial of Service through coldToFrozen.sh Script in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Improper Access Control in Data Model Acceleration in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-377

Improper Input Validation during User Account Creation in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-176

Remote Command Execution (RCE) through the '/splunkd/__upload/indexing/preview' REST endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Command injection

Stored Cross-Site Scripting (XSS) through Path Traversal in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Sensitive Information Disclosure in Discover Splunk Observability Cloud app for Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Sensitive Information Disclosure through Improper Access Control in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Sensitive Information Disclosure in MongoClient logging channel in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure