Splunk Enterprise.

Sensitive Information Disclosure in "_internal" index in Splunk Enterprise

• Splunk Enterprise
• Information disclosure

Sensitive Information Disclosure in "_internal" index in Splunk Enterprise

• Splunk Enterprise
• Information disclosure

Client-Side Denial of Service (DoS) through ''/splunkd/__raw/services/authentication/users/username'' REST API endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service

Sensitive Information Disclosure in ''_internal'' index in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Improper Access Control in Splunk Monitoring Console App

• Splunk Enterprise
• Information disclosure

Risky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Server-side request forgery (SSRF)

Improper Input Validation in "label" column field in Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade

• Splunk Enterprise
• Broken access control

Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Unauthenticated Log Injection in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Other injection

Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade

• Splunk Enterprise
• Broken access control

Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

URL validation bypass through Views Dashboard in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Open redirect

Risky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Open Redirect on Web Login endpoint in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Open redirect

Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Server-side request forgery (SSRF)

Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise

• Splunk Enterprise
• Splunk Enterprise Cloud
• Denial of service

Improper Access Control in Background Job Submission in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service

Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise

• Splunk Enterprise
• Splunk Enterprise Cloud
• Cross-site request forgery (CSRF)

Missing Access Control of Saved Searches in the Splunk Archiver app

• Splunk Enterprise
• Broken access control

Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

• Splunk Enterprise
• Splunk Enterprise Cloud
• Cross-site request forgery (CSRF)

Sensitive Information Disclosure in the SHCConfig logging channel in Clustered Deployments in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Remote Command Execution through Scripted Input Files in Splunk Enterprise

• Splunk Enterprise
• Command injection

Improper Access Control in System Source Types Configuration in Splunk Enterprise

• Splunk Enterprise
• Splunk Enterprise Cloud
• Broken access control

Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise

• Splunk Enterprise
• Splunk Enterprise Cloud
• Path traversal

Improper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Reflected Cross-Site Scripting (XSS) on Splunk Enterprise through dashboard PDF generation component

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site request forgery (CSRF)

Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

• Splunk Enterprise
• Splunk Cloud Platform
• CWE-20

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Sensitive Information Disclosure in Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Secure Gateway
• Information disclosure

Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Sensitive Information Disclosure through SPL commands

• Splunk Enterprise
• Splunk Cloud Platform
• Weak cryptography or TLS

Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway

• Splunk Enterprise
• Splunk Secure Gateway
• Information disclosure

Information Disclosure due to Username Collision with a Role that has the same Name as the User

• Splunk Enterprise
• Splunk Cloud Platform
• Information disclosure

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app

• Splunk Enterprise
• Splunk Secure Gateway
• Insecure deserialization

Sensitive information disclosure in AdminManager logging channel

• Splunk Enterprise
• Information disclosure

Sensitive information disclosure in REST_Calls logging channel

• Splunk Enterprise
• Information disclosure

Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site request forgery (CSRF)

Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows

• Splunk Enterprise
• Insecure deserialization

Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service

Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard

• Splunk Enterprise
• Broken access control

Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk

• Splunk Enterprise
• Path traversal

Improper Access Control for low-privileged user in Splunk Secure Gateway App

• Splunk Enterprise
• Splunk Secure Gateway
• Broken access control

Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Persistent Cross-site Scripting (XSS) in Web Bulletin

• Splunk Enterprise
• Splunk Cloud Platform
• Cross-site scripting (XSS)

Low-privileged user could create experimental items

• Splunk Enterprise
• Splunk Cloud Platform
• Broken access control

Denial of Service through null pointer reference in “cluster/config” REST endpoint

• Splunk Enterprise
• Splunk Cloud Platform
• Memory corruption

Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows

• Splunk Enterprise
• Path traversal

Denial of Service (DoS) on the datamodel/web REST endpoint

• Splunk Enterprise
• Splunk Cloud Platform
• Denial of service