Splunk Cloud Vulnerabilities
Splunk Splunk Cloud vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Insufficient Access Control in Splunk Enterprise and Splunk Cloud Platform
CVE-2024-53245SplunkSplunk Enterprise3.1LOWSensitive Information Disclosure in Splunk Enterprise and Cloud Platform
CVE-2024-53246SplunkSplunk Enterprise5.3MEDIUMPrivilege Escalation in Splunk Enterprise and Cloud Platforms
CVE-2024-53244SplunkSplunk Enterprise5.7MEDIUMLow-Privileged User Vulnerability in Splunk Enterprise
CVE-2024-45737SplunkSplunk Enterprise4.3MEDIUMLow-Privileged User Vulnerability in Splunk Enterprise
CVE-2024-45732SplunkSplunk Enterprise7.1HIGHSplunk Enterprise Version Vulnerability Could Lead to Browser JavaScript Execution
CVE-2024-45741SplunkSplunk Enterprise5.4MEDIUMSplunk Enterprise Versions below 9.3.1, 9.2.3, and 9.1.6 Have a Vulnerability in Field Transformation That Can Crash the Splunk Daemon
CVE-2024-45736SplunkSplunk Enterprise6.5MEDIUMLow-Privileged User Could Execute Unauthorized JavaScript Code Through Scheduled Views
CVE-2024-45740SplunkSplunk Enterprise5.4MEDIUMSplunk Enterprise Vulnerability: Arbitrary JavaScript Code Execution in Browser Context
CVE-2024-36997SplunkSplunk Enterprise4.6MEDIUMLow-Privileged User Could Execute Unauthorized JavaScript Code Through Splunk Web Bulletin Messages
CVE-2024-36993SplunkSplunk Enterprise5.4MEDIUMLow-Privileged Users Can Create Experimental Items in Splunk Enterprise Versions Below 9.2.2, 9.1.5, and 9.0.10
CVE-2024-36995SplunkSplunk Enterprise4.3MEDIUMSplunk Enterprise Crash Vulnerability
CVE-2024-36982SplunkSplunk Enterprise7.5HIGHLow-Privileged User Could Cause Denial of Service in Splunk Enterprise
CVE-2024-36990SplunkSplunk Enterprise6.5MEDIUMSplunk Enterprise Vulnerable to Persistent XSS Attacks
CVE-2024-36992SplunkSplunk Enterprise5.4MEDIUMAuthenticated User Could Run Risky Commands Using Higher-Privileged User's Permissions to Bypass SPL Safeguards in Analytics Workspace
CVE-2024-36986SplunkSplunk Enterprise6.3MEDIUMAuthenticated User Vulnerability in Splunk Enterprise and Splunk Cloud Platform Could Allow Arbitrary Code Execution
CVE-2024-36983SplunkSplunk Enterprise8HIGHSplunk Enterprise Vulnerability: Brute-Force Password Guessing Attacks
CVE-2024-36996SplunkSplunk Enterprise5.3MEDIUMLow-Privileged User Vulnerability in Splunk Enterprise and Cloud Platform Could Lead to Execution of Unauthorized JavaScript Code
CVE-2024-36994SplunkSplunk Enterprise5.4MEDIUMLow-Privileged User Could Create Notifications in Splunk Web Bulletin Messages
CVE-2024-36989SplunkSplunk Enterprise6.5MEDIUMArbitrary File Upload Vulnerability in Splunk Enterprise
CVE-2024-36987SplunkSplunk Enterprise4.3MEDIUMSplunk Enterprise Vulnerability: Risky SPL Commands in Dashboard Examples Hub
CVE-2024-29946SplunkSplunk Enterprise📰8.1HIGHSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command
CVE-2024-23676SplunkSplunk Enterprise4.6MEDIUMServer Response Disclosure in RapidDiag Salesforce.com Log File
CVE-2024-23677SplunkSplunk Enterprise4.3MEDIUMSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion
CVE-2024-23675SplunkSplunk Enterprise6.5MEDIUMSplunk Enterprise Vulnerability: Remote Code Execution via Malicious XSLT
CVE-2023-46214SplunkSplunk Enterprise👾EPSS 17%📰8HIGH