VYPR

Splunk

by Splunk

Source repositories

CVEs (209)

  • CVE-2023-32717MedJun 1, 2023
    Splunk
    Splunk
    risk 0.28cvss 4.3epss 0.00

    On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and in Splunk Cloud Platform versions below 9.0.2303.100, an unauthorized user can access the {{/services/indexing/preview}} REST endpoint to overwrite search results if they know the search ID (SID) of an existing…

  • CVE-2023-32709MedJun 1, 2023
    Splunk
    Splunk
    risk 0.28cvss 4.3epss 0.00

    In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the ‘user’ role can see the hashed version of the initial user name and password for the Splunk instance by using the…

  • CVE-2023-22938MedFeb 14, 2023
    Splunk
    Splunk
    risk 0.28cvss 4.3epss 0.00

    In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance.

  • CVE-2023-22937MedFeb 14, 2023
    Splunk
    Splunk
    risk 0.28cvss 4.3epss 0.00

    In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may now be one of the following only: .csv, .csv.gz, .kmz, .kml, .mmdb, or .mmdb.gzl.

  • CVE-2023-22931MedFeb 14, 2023
    Splunk
    Splunk
    risk 0.28cvss 4.3epss 0.00

    In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying permissions. This feature has been deprecated and disabled by default.

  • CVE-2022-26070MedMay 6, 2022
    Splunk
    Splunk
    risk 0.28cvss 4.3epss 0.01

    When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions before 8.1.0.

  • CVE-2013-6772MedJan 23, 2020
    Splunk
    Splunk
    risk 0.28cvss 4.3epss 0.01

    Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking

  • CVE-2017-5607LowApr 10, 2017
    Splunk
    Splunk
    risk 0.26cvss 3.5epss 0.06

    Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow…

  • CVE-2026-20137LowFeb 18, 2026
    Splunk
    Splunk
    risk 0.23cvss 3.5epss 0.00

    In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.5, 9.3.7, and 9.2.9, and Splunk Cloud Platform versions below 10.1.2507.0, 10.0.2503.9, 9.3.2411.112, and 9.3.2408.122, a low-privileged user who does not hold the "admin" or "power" Splunk roles could bypass the SPL…

  • CVE-2025-20382LowDec 3, 2025
    Splunk
    Splunk
    risk 0.23cvss 3.5epss 0.00

    In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.10, 10.0.2503.8, and 9.3.2411.120, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create a views dashboard with a custom…

  • CVE-2025-20379LowNov 12, 2025
    Splunk
    Splunk
    risk 0.23cvss 3.5epss 0.00

    In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a saved search…

  • CVE-2025-20378LowNov 12, 2025
    Splunk
    Splunk
    risk 0.20cvss 3.1epss 0.00

    In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker could craft a malicious URL using the `return_to` parameter of the Splunk Web login endpoint. When…

  • CVE-2025-20325LowJul 7, 2025
    Splunk
    Splunk
    risk 0.20cvss 3.1epss 0.00

    In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.113, and 9.2.2406.119, the software potentially exposes the search head cluster [splunk.secret](https://help.splunk.com/en/splunk-enterprise/admini…

  • CVE-2024-53245LowDec 10, 2024
    Splunk
    Splunk
    risk 0.20cvss 3.1epss 0.00

    In Splunk Enterprise versions below 9.3.0, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles, that has a username with the same name as a role with read access to…

  • CVE-2022-43562LowNov 4, 2022
    Splunk
    Splunk
    risk 0.20cvss 3.0epss 0.00

    In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host header, which could let a remote authenticated user conduct various attacks against the system, including cross-site scripting and cache poisoning.

  • CVE-2025-20388LowDec 3, 2025
    Splunk
    Splunk
    risk 0.18cvss 2.7epss 0.00

    In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.7, and 9.3.2411.116, a user who holds a role that contains the high privilege capability `change_authentication` could enumerate internal IP…

  • CVE-2025-20373LowNov 26, 2025
    Splunk
    Splunk
    risk 0.18cvss 2.7epss 0.00

    In Splunk Add-on for Palo Alto Networks versions below 2.0.2, the add-on exposes client secrets in plain text in the _internal index during the addition of new “Data Security Accounts“. The vulnerability would require either local access to the log files or administrative…

  • CVE-2022-37438LowAug 16, 2022
    Splunk
    Splunk
    risk 0.17cvss 2.6epss 0.01

    In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real name) about Splunk users, when visited by another user through the drilldown component. The…

  • CVE-2025-20385LowDec 3, 2025
    Splunk
    Splunk
    risk 0.16cvss 2.4epss 0.00

    In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a user who holds a role with a high privilege capability `admin_all_objects` could craft a malicious payload through the…

  • CVE-2011-4642Jan 3, 2012
    Splunk
    Splunk
    risk 0.05cvss —epss 0.29

    mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as…

Page 9 of 11