GHSA-FHC2-8QX8-6VJ7 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-MR4H-QF9J-F665 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-MWGR-84FV-3JH9 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-QGJ7-FMQ2-6CC4 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-QV3P-FMV3-9HWW vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-V6R4-35F9-9RPW vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

CVE-2025-11621 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

CVE-2025-12044 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-9G4H-H484-3578 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

GHSA-VP5W-XCFC-73WF vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips...

Exploit for Function Call With Incorrectly Specified Argument Value in Splunk

No d...

The vulnerability of the Splunk Enterprise platform for operational analysis lies in the improper assignment of permissions to critical resources. This allows a perpetrator to gain access to the installation directory (by default, C:\Program Files\Splunk) and all its contents.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to gain access to the installation directory by default, C:\Program Files\Splunk and...

The vulnerability of the Splunk MCP Server application, related to authentication errors, allows a violator to circumvent the restrictions on allowed commands in the MCP (Model Context Protocol).

The vulnerability of the Splunk MCP Server data processing and analysis application is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the restrictions on allowed commands in the MCP Model Context Protocol...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient validation of incoming requests, allows a perpetrator to carry out an SSRF attack.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by sending a specially crafted HTTP request remotely...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Views Dashboard component of the Splunk Enterprise platform for operational analysis allows attackers to carry out phishing attacks.

The vulnerability of the Views Dashboard component of the Splunk Enterprise operational analytics platform is related to the redirection of the URL to an unreliable website. Exploiting this vulnerability allows a malicious actor to conduct phishing attacks using a specially created URL address...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Splunk Enterprise operating analysis platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Splunk Enterprise platform for operational analysis lies in its improper handling of output data from registration logs. This allows attackers to poison, falsify, or conceal confidential data in these logs.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to poison, falsify, or hide confidential data from log records using specially created HT...

The vulnerability of the monitoring and data collection application for Splunk Universal Forwarder arises from the improper assignment of permissions to critical resources. This allows a perpetrator to gain access to the installation directory (by default, C:\Program Files\SplunkUniversalForwarder) and all its contents.

The vulnerability of the monitoring and data collection application for various sources is related to the improper assignment of permissions to the critical resource. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the installation directory by...