Splunk Cloud Platform和Splunk Enterprise 信息泄露漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An information disclosure vulnerability exists...

PT-2025-13015 · Splunk · Splunk Cloud Platform +2

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.4.1 Splunk Enterprise versions prior to 9.3.3 Splunk Enterprise versions prior to 9.2.5 Splunk Enterprise versions prior to 9.1.8 Splunk Secure Gateway app on Splunk Cloud Platform versions prior to 3.8.3...

Splunk Cloud Platform和Splunk Enterprise 日志信息泄露漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. Splunk Cloud Platform and Splunk Enterprise ha...

Splunk Cloud Platform和Splunk Enterprise 信息泄露漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An information disclosure vulnerability exists...

Splunk Enterprise 9.1.0 < 9.1.8, 9.2.0 < 9.2.5, 9.3.0 < 9.3.3, 9.4.0 < 9.4.1 (SVD-2025-0302)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0302 advisory. - In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure...

Splunk Enterprise 9.1.0 < 9.1.8, 9.2.0 < 9.2.5, 9.3.0 < 9.3.3 (SVD-2025-0304)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0304 advisory. - In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.103,...

Splunk Enterprise 9.1.0 < 9.1.8, 9.2.0 < 9.2.5, 9.3.0 < 9.3.3, 9.4.0 < 9.4.1 (SVD-2025-0306)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0306 advisory. - In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107,...

Splunk Enterprise 9.1.0 < 9.1.8, 9.2.0 < 9.2.5, 9.3.0 < 9.3.3 (SVD-2025-0303)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0303 advisory. - In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.2.2403.108, and...

CVE-2025-29923 vulnerabilities

Vulnerabilities for packages: atlantis, authservice, splunk-otel-collector, oauth2-proxy, falcosidekick, gitea, kots, fluent-bit-plugin-loki...

GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: atlantis, authservice, splunk-otel-collector, oauth2-proxy, falcosidekick, gitea, kots, fluent-bit-plugin-loki...

CVE-2025-29923 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector-contrib-fips, gitea-fips, falcosidekick, keda, argo-cd-fips, gitea, dapr-fips, rekor-fips, falcosidekick-fips, atlantis, juicefs, dapr, oauth2-proxy, fluent-bit-plugin-loki, mattermost-fips, authservice, loki, telegraf,...

GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: kots, opentelemetry-collector-contrib-fips, gitea-fips, falcosidekick, keda, argo-cd-fips, gitea, dapr-fips, rekor-fips, falcosidekick-fips, atlantis, juicefs, dapr, oauth2-proxy, fluent-bit-plugin-loki, mattermost-fips, authservice, loki, telegraf,...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: nats, opentelemetry-collector-contrib-fips, opentelemetry-collector-fips, tempo-fips, opentelemetry-collector, keda, kargo, opentelemetry-collector-contrib, argo-rollouts-fips, grafana-alloy-fips, argo-cd-fips, argo-rollouts, eks-distro, argo-workflows-fips,...

The vulnerability of the information extraction application for Active Directory in Splunk’s Supporting Add-on for Active Directory lies in the use of a regular expression with high computational complexity, which can lead to service interruptions.

The vulnerability of the Active Directory data extraction application “Splunk Supporting Add-on for Active Directory” is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Splunk App for SOAR software lies in its insecure management of privileges, allowing attackers to elevate their privileges.

The vulnerability of the Splunk App for SOAR software relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

uberAgent - Splunk dashboard does not display information about applications and desktops from DaaS

Splunk dashboard CVAD/DaaS Applications & Desktops does not display any information about published applications and desktops for DAAS. uberAgent.log file located in C:\Windows\Temp on the machine used for Citrix Cloud monitoring shows the errors: 2025-03-05 12:11:08.145...

uberAgent service stops after a few seconds

Windows' Services console shows that uberAgent service is not running. When manually started, the service starts and stops after a few seconds. uberAgent log file located in C:\Windows\Temp default location shows the issue with network driver startup. Example: 2025-03-01 17:28:33.013 +0200,INFO...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: grafana-mimir, dagger, sops, k3s, falcoctl, openbao, skaffold, terragrunt, istio, argo-workflows, tflint, pulumi, sftpgo, opentofu, grpc-health-probe, harbor-registry, flux-kustomize-controller, gatus, nerdctl, steampipe, aactl, spire-controller-manager, rekor, podma...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: grafana-mimir, dagger, sops, k3s, falcoctl, openbao, skaffold, terragrunt, istio, argo-workflows, tflint, pulumi, sftpgo, opentofu, grpc-health-probe, harbor-registry, flux-kustomize-controller, gatus, nerdctl, steampipe, aactl, spire-controller-manager, rekor, podma...

CVE-2021-26253

A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or...