2 matches found
EUVD-2026-62945
In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive document password by invoking either the detonate file or detonate url action, because the action's documentpassword parameter is not masked an...
4.3CVSS5.3AI score0.00188EPSS
SaveExploits0References2
PT-2026-78811
In versions below 2.2.1 of the Splunk Attack Analyzer Connector for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking either the detonate file or detonate url action, because the action's archive password parameter is not...
4.3CVSS5.3AI score0.00188EPSS
SaveExploits0References2
20