CVE-2025-29923 vulnerabilities

Vulnerabilities for packages: gitea, kots, atlantis, traefik-fips, loki, rekor-fips, argo-cd, loki-fips, fluent-bit-plugin-loki, keda, falcosidekick-fips, dapr, gitea-fips, argo-cd-fips, dapr-fips, splunk-otel-collector, splunk-otel-collector-fips, opentelemetry-collector-contrib-fips, juicefs,...

GHSA-92CP-5422-2MW7 vulnerabilities

Vulnerabilities for packages: gitea, kots, atlantis, traefik-fips, loki, rekor-fips, argo-cd, loki-fips, fluent-bit-plugin-loki, keda, falcosidekick-fips, dapr, gitea-fips, argo-cd-fips, dapr-fips, splunk-otel-collector, splunk-otel-collector-fips, opentelemetry-collector-contrib-fips, juicefs,...

GHSA-93MQ-9FFX-83M2 vulnerabilities

Vulnerabilities for packages: kargo, k8sgpt, argo-workflows, grafana-alloy, grafana-alloy-fips, argo-rollouts-fips, nats, eks-distro, argo-cd, argo-rollouts, amazon-cloudwatch-agent-fips, keda, opentelemetry-collector-fips, opentelemetry-collector, eks-distro-fips, argo-cd-fips,...

The vulnerability of the information extraction application for Active Directory in Splunk’s Supporting Add-on for Active Directory lies in the use of a regular expression with high computational complexity, which can lead to service interruptions.

The vulnerability of the Active Directory data extraction application “Splunk Supporting Add-on for Active Directory” is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Splunk App for SOAR software lies in its insecure management of privileges, allowing attackers to elevate their privileges.

The vulnerability of the Splunk App for SOAR software relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

uberAgent - Splunk dashboard does not display information about applications and desktops from DaaS

Splunk dashboard CVAD/DaaS Applications & Desktops does not display any information about published applications and desktops for DAAS. uberAgent.log file located in C:\Windows\Temp on the machine used for Citrix Cloud monitoring shows the errors: 2025-03-05 12:11:08.145...

uberAgent service stops after a few seconds

Windows' Services console shows that uberAgent service is not running. When manually started, the service starts and stops after a few seconds. uberAgent log file located in C:\Windows\Temp default location shows the issue with network driver startup. Example: 2025-03-01 17:28:33.013 +0200,INFO...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: timestamp-authority, grafana-alloy, temporal-ui-server, dgraph, fulcio, hydra, podman, traefik, gitsign, vexctl, sigstore-scaffolding, apko, dagger, istio, kots, goreleaser, kyverno-policy-reporter, nerdctl, caddy, grafana-mimir, gomplate, spire-controller-manager,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: timestamp-authority, grafana-alloy, temporal-ui-server, dgraph, fulcio, hydra, podman, traefik, gitsign, vexctl, sigstore-scaffolding, apko, dagger, istio, kots, goreleaser, kyverno-policy-reporter, nerdctl, caddy, grafana-mimir, gomplate, spire-controller-manager,...

CVE-2021-26253

A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or...

CVE-2022-27183

The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Enterprise versions before 8.1.4. The Monitoring Console app is a bundled app included in Splunk Enterprise, not for download on SplunkBase, and not installed on Splunk Cloud Platfo...

CVE-2022-26889

In Splunk Enterprise versions before 8.1.2, the uri path to load a relative resource within a web page is vulnerable to path traversal. It allows an attacker to potentially inject arbitrary content into the web page e.g., HTML Injection, XSS or bypass SPL safeguards for risky commands. The attack...

CVE-2025-0367

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service ReDoS attack...

CVE-2025-0367

CVE-2025-0367 affects the Splunk Supporting Add-on for Active Directory (SA-ldapsearch). The vulnerable component is a regular expression pattern in versions 3.1.0 and earlier, which can be exploited to trigger a Regular Expression Denial of Service (ReDoS). Public records indicate a potential im...

CVE-2025-0367 Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service ReDoS attack...

CVE-2025-0367 Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service ReDoS attack...

Splunk Supporting Add-on for Active Directory 安全漏洞

Splunk Supporting Add-on for Active Directory SA-ldapsearch is an add-on for Active Directory from Splunk. A security vulnerability exists in Splunk Supporting Add-on for Active Directory version 3.1.0 and earlier, which stems from a vulnerable regular expression pattern that could lead to a...

CVE-2025-0367: Inefficient Regular Expression Complexity

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service ReDoS attack...

CISA Releases Microsoft Expanded Cloud Logs Implementation Playbook

Today, CISA released the Microsoft Expanded Cloud Logs Implementation Playbook to help organizations get the most out of Microsoft’s newly introduced logs in Microsoft Purview Audit Standard. This step-by-step guide enables technical personnel to better detect and defend against advanced intrusio...

PT-2025-3854 · Splunk · Splunk Supporting Add-On For Active Directory

Name of the Vulnerable Software and Affected Versions: Splunk Supporting Add-on for Active Directory versions 3.1.0 and earlier Description: A vulnerable regular expression pattern in the Splunk Supporting Add-on for Active Directory could lead to a Regular Expression Denial of Service ReDoS...