Splunk Add On Builder vulnerabilities
3 vulnerabilities
Known vulnerabilities in Splunk Add On Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-46230splunkadd-on_builder+1
EPSS score0.39%
In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.CVE-2023-46231splunkadd-on_builder+1EPSS score0.48%
In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.CVE-2023-22943splunkadd-on_builder+3EPSS score0.32%
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.