CVE Browser

Information Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) app

Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app

Improper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka

Server-Side Request Forgery (SSRF) through the REST API in Splunk Connect for Kafka

Regular Expression Denial of Service (DoS) through the REST API in Splunk Connect for Kafka

Denial of Service (DoS) through the REST API in Splunk Connect for Kafka

Incorrect Permission Assignment for Scheduled Searches in Splunk AI Toolkit

Improper Access Control during Experiment History Deletion through the REST API in Splunk AI Toolkit

Improper Access Control in Experiment History through the REST API in Splunk AI Toolkit

Improper Access Control through Scheduled Searches in Splunk AI Toolkit

Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit

Race Condition during Model Upload through the REST API in Splunk AI Toolkit

Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit

Improper Privilege Management through Agent Run History in Splunk AI Toolkit

Information Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security Cloud

Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud

Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security

SPL Injection through the REST API in Splunk Enterprise Security

Information Disclosure through Action Parameters in Zoom app for Splunk SOAR

Information Disclosure through Action Parameters in Venafi app for Splunk SOAR

Information Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAR

Information Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAR

Information Disclosure through Action Parameters in Phantom app for Splunk SOAR

Information Disclosure through Action Parameters in MS Graph for Active Directory app for Splunk SOAR