Splunk vulnerabilities
420 vulnerabilities
Known vulnerabilities in Splunk products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 56 products.
Products
50 of 56- Splunk286 vulnerabilities
- Splunk Enterprise234 vulnerabilities
- Splunk Cloud Platform114 vulnerabilities
- Universal Forwarder62 vulnerabilities
- Splunk Secure Gateway18 vulnerabilities
- Soar16 vulnerabilities
- Splunk SOAR16 vulnerabilities
- Ai Toolkit12 vulnerabilities
- Splunk AI Toolkit12 vulnerabilities
- Splunk Cloud11 vulnerabilities
- Cloud9 vulnerabilities
- Splunk Enterprise Cloud5 vulnerabilities
- Connect For Kafka4 vulnerabilities
- Enterprise Security4 vulnerabilities
- Splunk Connect For Kafka4 vulnerabilities
- AD LDAP App For Splunk SOAR3 vulnerabilities
- Add On Builder3 vulnerabilities
- Splunk Add On Builder3 vulnerabilities
- Splunk App For Lookup File Editing3 vulnerabilities
- Splunk MCP Server3 vulnerabilities
- Cisco Talos Intelligence For Enterprise Security Cloud2 vulnerabilities
- Splunk Enterprise Security2 vulnerabilities
- Splunk Enterprise Security (ES)2 vulnerabilities
- AWS IAM App For Splunk SOAR1 vulnerabilities
- Azure AD Graph App For Splunk SOAR1 vulnerabilities
- Cisco Secure Malware Analytics App For Splunk SOAR1 vulnerabilities
- Cisco Webex App For Splunk SOAR1 vulnerabilities
- Cloudconnect Software Development Kit1 vulnerabilities
- Crowdstrike Oauth API App For Splunk SOAR1 vulnerabilities
- Fireamp1 vulnerabilities
- Hadoop Connect1 vulnerabilities
- It Service Intelligence1 vulnerabilities
- Model Context Protocol Server1 vulnerabilities
- MS Graph For Active Directory App For Splunk SOAR1 vulnerabilities
- Nmap Scanner1 vulnerabilities
- Nozzle1 vulnerabilities
- On Call1 vulnerabilities
- Phantom App For Splunk SOAR1 vulnerabilities
- RSA Securid Authentication Manager App For Splunk SOAR1 vulnerabilities
- Software Development Kit1 vulnerabilities
- Splunk Add On For Palo Alto Networks1 vulnerabilities
- Splunk App For SOAR1 vulnerabilities
- Splunk App For Stream1 vulnerabilities
- Splunk Attack Analyzer Connector For Splunk SOAR1 vulnerabilities
- Splunk Cloudconnect SDK1 vulnerabilities
- Splunk ITSI1 vulnerabilities
- Splunk MCP Server App1 vulnerabilities
- Splunk On Call (Victorops)1 vulnerabilities
- Splunk SOAR (Cloud)1 vulnerabilities
- Splunk SOAR (On Premises)1 vulnerabilities
CVE-2018-11409splunksplunk
EPSS score98.22%
Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.CVE-2018-7431splunksplunkEPSS score2.28%
Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.CVE-2018-7427splunksplunkEPSS score1.02%
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2018-7429splunksplunkEPSS score1.75%
Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6.5.0 allow remote attackers to cause a denial of service via a malformed HTTP request.CVE-2018-7432splunksplunkEPSS score2.27%
Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow remote attackers to cause a denial of service via a crafted HTTP request.CVE-2013-2766splunksplunkEPSS score1.80%
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-7394splunksplunkEPSS score2.09%
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.CVE-2013-6870splunksplunkEPSS score1.79%
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-6771splunksplunkEPSS score4.80%
Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script.CVE-2013-6772splunksplunkEPSS score0.68%
Splunk before 5.0.4 lacks X-Frame-Options which can allow ClickjackingCVE-2013-6773splunksplunkEPSS score0.27%
Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate privilegesCVE-2021-26253splunksplunk+1EPSS score0.82%
A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or service.CVE-2021-42743splunksplunk+1EPSS score0.23%
A misconfiguration in the node default path allows for local privilege escalation from a lower privileged user to the Splunk user in Splunk Enterprise versions before 8.1.1 on Windows.CVE-2021-31566alpinelibarchive+23EPSS score0.39%
An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to gain more privileges in a system.CVE-2021-31559splunksplunk+1EPSS score0.89%
A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders.CVE-2021-36976alpinelibarchive+17EPSS score2.84%
libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block).CVE-2021-22876alpinecurl+18EPSS score5.30%
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.CVE-2021-22924alpinecurl+33EPSS score6.27%
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.CVE-2021-22946alpinecurl+31EPSS score4.54%
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.CVE-2021-22898alpinecurl+29EPSS score4.51%
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers. Due to a flaw in the option parser for sending NEW_ENV variables, libcurl could be made to pass on uninitialized data from a stack based buffer to the server, resulting in potentially revealing sensitive internal information to the server using a clear-text network protocol.