{"items":[{"id":"CVE-2025-0367","published":"2025-01-30T17:04:49.734Z","updated":"2025-02-12T19:51:11.515Z","title":"Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Supporting Add-on for Active Directory","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2025-22621","published":"2025-01-07T16:48:32.866Z","updated":"2025-02-28T11:03:57.914Z","title":"Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk App for SOAR","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2024-53244","published":"2024-12-10T18:01:24.534Z","updated":"2025-02-28T11:03:44.167Z","title":"Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter","severity":"MEDIUM","score":5.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2024-53246","published":"2024-12-10T18:01:16.803Z","updated":"2025-02-28T11:03:55.865Z","title":"Sensitive Information Disclosure through SPL commands","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2024-53243","published":"2024-12-10T18:00:49.236Z","updated":"2025-02-28T11:03:42.526Z","title":"Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2024-53245","published":"2024-12-10T18:00:33.254Z","updated":"2025-02-28T11:03:55.614Z","title":"Information Disclosure due to Username Collision with a Role that has the same Name as the User","severity":"LOW","score":3.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00365,"kevAdded":null},{"id":"CVE-2024-53247","published":"2024-12-10T18:00:24.359Z","updated":"2025-02-28T11:03:41.947Z","title":"Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01077,"kevAdded":null},{"id":"CVE-2024-45739","published":"2024-10-14T17:03:38.949Z","updated":"2025-02-28T11:03:52.768Z","title":"Sensitive information disclosure in AdminManager logging channel","severity":"MEDIUM","score":4.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00507,"kevAdded":null},{"id":"CVE-2024-45738","published":"2024-10-14T17:03:38.142Z","updated":"2025-02-28T11:03:47.990Z","title":"Sensitive information disclosure in REST_Calls logging channel","severity":"MEDIUM","score":4.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2024-45737","published":"2024-10-14T17:03:37.328Z","updated":"2025-02-28T11:03:53.256Z","title":"Maintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2024-45733","published":"2024-10-14T17:03:36.497Z","updated":"2025-02-28T11:03:46.564Z","title":"Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01093,"kevAdded":null},{"id":"CVE-2024-45732","published":"2024-10-14T17:03:35.668Z","updated":"2025-02-28T11:03:50.807Z","title":"Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app","severity":"HIGH","score":7.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2024-45736","published":"2024-10-14T17:03:34.828Z","updated":"2025-02-28T11:03:54.861Z","title":"Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00537,"kevAdded":null},{"id":"CVE-2024-45741","published":"2024-10-14T17:03:33.986Z","updated":"2025-02-28T11:04:00.392Z","title":"Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.14798,"kevAdded":null},{"id":"CVE-2024-45734","published":"2024-10-14T17:03:30.412Z","updated":"2025-02-28T11:03:43.384Z","title":"Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2024-45740","published":"2024-10-14T17:03:29.360Z","updated":"2025-02-28T11:03:58.462Z","title":"Persistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2024-45731","published":"2024-10-14T16:46:01.751Z","updated":"2025-02-28T11:03:47.249Z","title":"Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00568,"kevAdded":null},{"id":"CVE-2024-45735","published":"2024-10-14T16:45:54.667Z","updated":"2025-02-28T11:03:52.049Z","title":"Improper Access Control for low-privileged user in Splunk Secure Gateway App","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2024-36997","published":"2024-07-01T16:57:47.904Z","updated":"2025-02-28T11:03:50.355Z","title":"Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint","severity":"MEDIUM","score":4.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00547,"kevAdded":null},{"id":"CVE-2024-36993","published":"2024-07-01T16:54:35.379Z","updated":"2025-02-28T11:03:40.785Z","title":"Persistent Cross-site Scripting (XSS) in Web Bulletin","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2024-36995","published":"2024-07-01T16:52:57.700Z","updated":"2025-02-28T11:03:55.127Z","title":"Low-privileged user could create experimental items","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2024-36982","published":"2024-07-01T16:31:04.078Z","updated":"2025-02-28T11:03:48.458Z","title":"Denial of Service through null pointer reference in “cluster/config” REST endpoint","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00495,"kevAdded":null},{"id":"CVE-2024-36991","published":"2024-07-01T16:31:03.563Z","updated":"2025-02-28T11:03:48.685Z","title":"Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.13006,"kevAdded":null},{"id":"CVE-2024-36990","published":"2024-07-01T16:30:57.995Z","updated":"2025-02-28T11:03:44.950Z","title":"Denial of Service (DoS) on the datamodel/web REST endpoint","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00687,"kevAdded":null},{"id":"CVE-2024-36985","published":"2024-07-01T16:30:57.461Z","updated":"2025-02-28T11:03:58.932Z","title":"Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.06464,"kevAdded":null},{"id":"CVE-2024-36992","published":"2024-07-01T16:30:51.507Z","updated":"2025-02-28T11:03:53.510Z","title":"Persistent Cross-site Scripting (XSS) in Dashboard Elements","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2024-36984","published":"2024-07-01T16:30:44.270Z","updated":"2026-11-03T23:59:36.237Z","title":"Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01412,"kevAdded":null},{"id":"CVE-2024-36986","published":"2024-07-01T16:30:42.325Z","updated":"2025-02-28T11:03:54.414Z","title":"Risky command safeguards bypass through Search ID query in Analytics Workspace","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2024-36983","published":"2024-07-01T16:30:41.779Z","updated":"2025-02-28T11:03:59.649Z","title":"Command Injection using External Lookups","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00996,"kevAdded":null},{"id":"CVE-2024-36996","published":"2024-07-01T16:30:41.186Z","updated":"2025-02-28T11:03:41.084Z","title":"Information Disclosure of user names","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2024-36994","published":"2024-07-01T16:30:40.653Z","updated":"2025-02-28T11:03:49.669Z","title":"Persistent Cross-site Scripting (XSS) in Dashboard Elements","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2024-36989","published":"2024-07-01T16:30:38.545Z","updated":"2025-02-28T11:03:53.004Z","title":"Low-privileged user could create notifications in Splunk Web Bulletin Messages","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2024-36987","published":"2024-07-01T16:30:36.235Z","updated":"2025-02-28T11:03:46.111Z","title":"Insecure File Upload in the indexing/preview REST endpoint","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00291,"kevAdded":null},{"id":"CVE-2024-29945","published":"2024-03-27T16:16:00.974Z","updated":"2025-12-16T18:13:23.577Z","title":"Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0095,"kevAdded":null},{"id":"CVE-2024-29946","published":"2024-03-27T16:15:59.872Z","updated":"2025-02-28T11:03:53.749Z","title":"Risky command safeguards bypass in Dashboard Examples Hub","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00773,"kevAdded":null},{"id":"CVE-2023-46230","published":"2024-01-30T17:00:49.161Z","updated":"2025-05-30T18:47:36.661Z","title":"Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder","severity":"HIGH","score":8.2,"vendor":"Splunk","product":"Splunk Add-on Builder","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2023-46231","published":"2024-01-30T17:00:46.832Z","updated":"2025-02-28T11:03:46.800Z","title":"Session Token Disclosure to Internal Log Files in Splunk Add-on Builder","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Add-on Builder","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2024-23678","published":"2024-01-22T20:37:43.095Z","updated":"2025-06-17T21:19:26.089Z","title":"Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0022,"kevAdded":null},{"id":"CVE-2024-23676","published":"2024-01-22T20:37:42.546Z","updated":"2025-06-17T14:24:05.909Z","title":"Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command","severity":"MEDIUM","score":4.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2024-23677","published":"2024-01-22T20:37:41.993Z","updated":"2025-02-28T11:03:55.344Z","title":"Server Response Disclosure in RapidDiag Salesforce.com Log File","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2024-23675","published":"2024-01-22T20:37:23.117Z","updated":"2025-02-28T11:03:59.164Z","title":"Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2024-22164","published":"2024-01-09T17:01:07.832Z","updated":"2025-06-03T14:31:04.696Z","title":"Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise Security (ES)","kev":false,"epss":0.00457,"kevAdded":null},{"id":"CVE-2024-22165","published":"2024-01-09T17:01:04.884Z","updated":"2025-02-28T11:03:43.686Z","title":"Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise Security (ES)","kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2023-46213","published":"2023-11-16T20:15:46.739Z","updated":"2025-02-28T11:03:42.823Z","title":"Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page","severity":"MEDIUM","score":4.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2023-46214","published":"2023-11-16T20:15:25.838Z","updated":"2025-12-16T18:23:23.962Z","title":"Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.89174,"kevAdded":null},{"id":"CVE-2023-40597","published":"2023-08-30T16:19:44.220Z","updated":"2025-07-01T13:45:24.210Z","title":"Absolute Path Traversal in Splunk Enterprise Using runshellscript.py","severity":"HIGH","score":7.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2023-40596","published":"2023-08-30T16:19:43.630Z","updated":"2025-02-28T11:03:54.197Z","title":"Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL","severity":"HIGH","score":7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2023-40593","published":"2023-08-30T16:19:41.308Z","updated":"2025-02-28T11:03:56.605Z","title":"Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00582,"kevAdded":null},{"id":"CVE-2023-40594","published":"2023-08-30T16:19:40.677Z","updated":"2025-02-28T11:03:47.517Z","title":"Denial of Service (DoS) via the ‘printf’ Search Function","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00399,"kevAdded":null},{"id":"CVE-2023-4571","published":"2023-08-30T16:19:39.150Z","updated":"2025-02-28T11:03:56.113Z","title":"Unauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)","severity":"HIGH","score":8.6,"vendor":"Splunk","product":"Splunk ITSI","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2023-40592","published":"2023-08-30T16:19:38.525Z","updated":"2025-02-28T11:03:48.911Z","title":"Reflected Cross-site Scripting (XSS) on \"/app/search/table\" web endpoint","severity":"HIGH","score":8.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00566,"kevAdded":null},{"id":"CVE-2023-40595","published":"2023-08-30T16:19:29.761Z","updated":"2025-02-28T11:03:49.175Z","title":"Remote Code Execution via Serialized Session Payload","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00901,"kevAdded":null},{"id":"CVE-2023-40598","published":"2023-08-30T16:19:28.135Z","updated":"2025-02-28T11:03:41.623Z","title":"Command Injection in Splunk Enterprise Using External Lookups","severity":"HIGH","score":8.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00852,"kevAdded":null},{"id":"CVE-2023-3997","published":"2023-07-31T16:16:19.911Z","updated":"2025-02-28T11:03:50.122Z","title":"Unauthenticated Log Injection In Splunk SOAR","severity":"HIGH","score":8.6,"vendor":"Splunk","product":"Splunk SOAR (On-premises)","kev":false,"epss":0.00286,"kevAdded":null},{"id":"CVE-2023-32709","published":"2023-06-01T16:34:30.933Z","updated":"2025-02-28T11:03:52.521Z","title":"Low-privileged User can View Hashed Default Splunk Password","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00391,"kevAdded":null},{"id":"CVE-2023-32707","published":"2023-06-01T16:34:30.607Z","updated":"2025-03-11T15:02:44.575Z","title":"‘edit_user’ Capability Privilege Escalation","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.78658,"kevAdded":null},{"id":"CVE-2023-32713","published":"2023-06-01T16:34:30.265Z","updated":"2025-02-28T11:03:54.632Z","title":"Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream","severity":"HIGH","score":7.8,"vendor":"Splunk","product":"Splunk App for Stream","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2023-32712","published":"2023-06-01T16:34:29.862Z","updated":"2025-02-28T11:03:57.287Z","title":"Unauthenticated Log Injection in Splunk Enterprise","severity":"HIGH","score":8.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2023-32714","published":"2023-06-01T16:34:29.504Z","updated":"2025-02-28T11:03:42.218Z","title":"Path Traversal in Splunk App for Lookup File Editing","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk App for Lookup File Editing","kev":false,"epss":0.42824,"kevAdded":null},{"id":"CVE-2023-32716","published":"2023-06-01T16:34:29.168Z","updated":"2025-02-28T11:03:45.371Z","title":"Denial of Service via the 'dump' SPL command","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2023-32710","published":"2023-06-01T16:34:28.796Z","updated":"2025-02-28T11:03:51.327Z","title":"Information Disclosure via the ‘copyresults’ SPL Command","severity":"MEDIUM","score":4.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2023-32717","published":"2023-06-01T16:34:28.464Z","updated":"2025-02-28T11:03:51.073Z","title":"Role-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2023-32706","published":"2023-06-01T16:34:28.142Z","updated":"2025-02-28T11:03:44.652Z","title":"Denial Of Service due to Untrusted XML Tag in XML Parser within  SAML Authentication","severity":"HIGH","score":7.7,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00602,"kevAdded":null},{"id":"CVE-2023-32715","published":"2023-06-01T16:34:27.816Z","updated":"2025-02-28T11:03:57.054Z","title":"Self Cross-Site Scripting (XSS) on Splunk App for Lookup File Editing","severity":"MEDIUM","score":4.7,"vendor":"Splunk","product":"Splunk App for Lookup File Editing","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2023-32711","published":"2023-06-01T16:34:27.478Z","updated":"2025-02-28T11:03:51.579Z","title":"Persistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.0035,"kevAdded":null},{"id":"CVE-2023-32708","published":"2023-06-01T16:34:27.126Z","updated":"2025-02-28T11:03:58.212Z","title":"HTTP Response Splitting via the ‘rest’ SPL Command","severity":"HIGH","score":7.2,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00749,"kevAdded":null},{"id":"CVE-2023-22939","published":"2023-02-14T17:24:47.539Z","updated":"2025-02-28T11:03:47.779Z","title":"SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00587,"kevAdded":null},{"id":"CVE-2023-22938","published":"2023-02-14T17:24:46.893Z","updated":"2025-03-19T18:53:03.165Z","title":"Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2023-22937","published":"2023-02-14T17:24:45.588Z","updated":"2025-02-28T11:03:41.352Z","title":"Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2023-22943","published":"2023-02-14T17:22:40.690Z","updated":"2025-02-28T11:03:49.432Z","title":"Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK","severity":"MEDIUM","score":4.8,"vendor":"Splunk","product":"Splunk Add-on Builder","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2023-22933","published":"2023-02-14T17:22:40.081Z","updated":"2025-02-28T11:03:44.416Z","title":"Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2023-22942","published":"2023-02-14T17:22:39.330Z","updated":"2025-02-28T11:03:45.664Z","title":"Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise","severity":"MEDIUM","score":5.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2023-22932","published":"2023-02-14T17:22:38.739Z","updated":"2025-02-28T11:03:57.639Z","title":"Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00398,"kevAdded":null},{"id":"CVE-2023-22936","published":"2023-02-14T17:22:38.050Z","updated":"2025-02-28T11:03:49.899Z","title":"Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2023-22941","published":"2023-02-14T17:22:37.444Z","updated":"2025-02-28T11:03:59.397Z","title":"Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon","severity":"MEDIUM","score":6.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01028,"kevAdded":null},{"id":"CVE-2023-22931","published":"2023-02-14T17:22:36.712Z","updated":"2025-02-28T11:03:46.340Z","title":"‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2023-22935","published":"2023-02-14T17:22:36.093Z","updated":"2025-03-20T13:55:35.952Z","title":"SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00613,"kevAdded":null},{"id":"CVE-2023-22934","published":"2023-02-14T17:22:35.427Z","updated":"2025-02-28T11:03:58.707Z","title":"SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise","severity":"HIGH","score":7.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01121,"kevAdded":null},{"id":"CVE-2023-22940","published":"2023-02-14T17:22:34.688Z","updated":"2025-02-28T11:03:47.020Z","title":"SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise","severity":"MEDIUM","score":6.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00429,"kevAdded":null},{"id":"CVE-2022-43572","published":"2022-11-04T22:23:39.383Z","updated":"2025-05-01T19:57:01.357Z","title":"Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00998,"kevAdded":null},{"id":"CVE-2022-43570","published":"2022-11-04T22:22:50.526Z","updated":"2025-05-05T20:30:12.036Z","title":"XML External Entity Injection through a custom View in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00792,"kevAdded":null},{"id":"CVE-2022-43569","published":"2022-11-04T22:22:31.895Z","updated":"2025-04-30T20:02:18.090Z","title":"Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise","severity":"HIGH","score":8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00917,"kevAdded":null},{"id":"CVE-2022-43568","published":"2022-11-04T22:22:13.266Z","updated":"2025-05-01T19:39:17.951Z","title":"Reflected Cross-Site Scripting via the radio template in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.42801,"kevAdded":null},{"id":"CVE-2022-43567","published":"2022-11-04T22:21:50.819Z","updated":"2025-05-05T20:34:05.121Z","title":"Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01563,"kevAdded":null},{"id":"CVE-2022-43566","published":"2022-11-04T22:21:21.337Z","updated":"2025-05-05T20:34:58.924Z","title":"Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise","severity":"HIGH","score":7.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01027,"kevAdded":null},{"id":"CVE-2022-43565","published":"2022-11-04T22:20:55.783Z","updated":"2025-05-05T20:35:48.097Z","title":"Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00793,"kevAdded":null},{"id":"CVE-2022-43564","published":"2022-11-04T22:20:36.543Z","updated":"2025-05-01T20:22:37.435Z","title":"Denial of Service in Splunk Enterprise through search macros","severity":"MEDIUM","score":4.9,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00939,"kevAdded":null},{"id":"CVE-2022-43563","published":"2022-11-04T22:19:55.669Z","updated":"2025-05-05T20:36:39.876Z","title":"Risky command safeguards bypass via rex search command field names in Splunk Enterprise","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00793,"kevAdded":null},{"id":"CVE-2022-43562","published":"2022-11-04T22:19:11.815Z","updated":"2025-05-05T20:37:25.294Z","title":"Host Header Injection in Splunk Enterprise","severity":"LOW","score":3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2022-43571","published":"2022-11-03T22:56:44.862Z","updated":"2025-05-02T18:24:40.047Z","title":"Remote Code Execution through dashboard PDF generation component in Splunk Enterprise","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.18604,"kevAdded":null},{"id":"CVE-2022-43561","published":"2022-11-03T22:06:41.735Z","updated":"2025-04-25T19:10:23.182Z","title":"Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise","severity":"MEDIUM","score":6.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00753,"kevAdded":null},{"id":"CVE-2022-37437","published":"2022-08-16T19:50:29.832Z","updated":"2024-09-16T20:03:48.193Z","title":"Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation","severity":"HIGH","score":7.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00458,"kevAdded":null},{"id":"CVE-2022-37439","published":"2022-08-16T19:49:49.787Z","updated":"2024-09-16T22:56:21.322Z","title":"Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input","severity":"MEDIUM","score":5.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.002,"kevAdded":null},{"id":"CVE-2022-37438","published":"2022-08-16T19:49:23.763Z","updated":"2024-09-17T01:46:12.412Z","title":"Information disclosure via the dashboard drilldown in Splunk Enterprise","severity":"LOW","score":2.6,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00539,"kevAdded":null},{"id":"CVE-2022-32158","published":"2022-06-15T16:50:43.633Z","updated":"2024-09-17T02:20:54.385Z","title":"Splunk Enterprise deployment servers allow client publishing of forwarder bundles","severity":"CRITICAL","score":9,"vendor":"Splunk, Inc","product":"Splunk Enterprise","kev":false,"epss":0.01526,"kevAdded":null},{"id":"CVE-2022-32157","published":"2022-06-15T16:50:14.702Z","updated":"2024-09-17T02:57:39.248Z","title":"Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads","severity":"HIGH","score":7.5,"vendor":"Splunk, Inc","product":"Splunk Enterprise","kev":false,"epss":0.01375,"kevAdded":null},{"id":"CVE-2022-32155","published":"2022-06-15T16:49:26.618Z","updated":"2024-09-16T20:12:22.106Z","title":"Universal Forwarder management services allows remote login by default","severity":"HIGH","score":7.5,"vendor":"Splunk, Inc","product":"Universal Forwarder","kev":false,"epss":0.02007,"kevAdded":null},{"id":"CVE-2022-32154","published":"2022-06-15T16:48:46.918Z","updated":"2024-09-16T20:11:36.885Z","title":"Risky commands warnings in Splunk Enterprise Dashboards","severity":"MEDIUM","score":6.8,"vendor":"Splunk, Inc","product":"Splunk Enterprise","kev":false,"epss":0.01453,"kevAdded":null},{"id":"CVE-2022-32153","published":"2022-06-15T16:48:21.566Z","updated":"2024-09-16T16:43:11.526Z","title":"Splunk Enterprise lacked TLS host name validation","severity":"HIGH","score":8.1,"vendor":"Splunk, Inc","product":"Splunk Enterprise","kev":false,"epss":0.00932,"kevAdded":null},{"id":"CVE-2022-32152","published":"2022-06-15T16:46:29.133Z","updated":"2024-09-17T02:02:11.058Z","title":"Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00973,"kevAdded":null},{"id":"CVE-2022-32151","published":"2022-06-15T16:46:07.016Z","updated":"2024-09-16T17:59:24.447Z","title":"Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default","severity":"HIGH","score":7.4,"vendor":"Splunk, Inc","product":"Splunk Enterprise","kev":false,"epss":0.00813,"kevAdded":null},{"id":"CVE-2022-32156","published":"2022-06-14T00:00:00.000Z","updated":"2026-11-02T22:10:03.157Z","title":"Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation","severity":"HIGH","score":7.4,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00835,"kevAdded":null},{"id":"CVE-2022-27183","published":"2022-05-06T16:38:41.000Z","updated":"2024-08-03T05:25:31.044Z","title":"Reflected XSS in a query parameter of the Monitoring Console","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00711,"kevAdded":null},{"id":"CVE-2022-26889","published":"2022-05-06T16:37:56.000Z","updated":"2024-08-03T05:18:38.088Z","title":"Path Traversal in search parameter results in external content injection","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.01501,"kevAdded":null},{"id":"CVE-2022-26070","published":"2022-05-06T16:37:16.000Z","updated":"2024-08-03T04:56:37.596Z","title":"Error message discloses internal path","severity":"MEDIUM","score":4.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00649,"kevAdded":null},{"id":"CVE-2021-42743","published":"2022-05-06T16:36:35.000Z","updated":"2024-08-04T03:38:50.215Z","title":"Local privilege escalation via a default path in Splunk Enterprise Windows","severity":"HIGH","score":8.8,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2021-33845","published":"2022-05-06T16:35:58.000Z","updated":"2024-08-04T00:05:51.041Z","title":"Username enumeration through lockout message in REST API","severity":"MEDIUM","score":5.3,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00901,"kevAdded":null},{"id":"CVE-2021-31559","published":"2022-05-06T16:35:19.000Z","updated":"2024-08-03T23:03:33.306Z","title":"S2S TcpToken authentication bypass","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00892,"kevAdded":null},{"id":"CVE-2021-26253","published":"2022-05-06T16:34:33.000Z","updated":"2024-08-03T20:19:20.123Z","title":"Bypass of Splunk Enterprise's implementation of DUO MFA","severity":"HIGH","score":8.1,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00816,"kevAdded":null},{"id":"CVE-2021-3422","published":"2022-03-25T18:02:43.000Z","updated":"2024-08-03T16:53:17.577Z","title":"Indexer denial-of-service via malformed S2S request","severity":"HIGH","score":7.5,"vendor":"Splunk","product":"Splunk Enterprise","kev":false,"epss":0.00601,"kevAdded":null}]}