22342 matches found
PT-2025-46680
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.0.1 Splunk Enterprise versions 9.2.9 through 9.4.5 Splunk Cloud Platform versions below 9.3.2411.116 Splunk Cloud Platform versions 9.3.2408.124 and below Splunk Cloud Platform versions below 10.0.2503.5...
Splunk Cloud Platform and Splunk Enterprise have vulnerabilities related to input validation errors.
Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An input validation error vulnerability exists...
CVE-2025-20379: Exposure of Sensitive Information to an Unauthorized Actor
In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a saved search with a risky command using th...
CVE-2025-20378: URL Redirection to Untrusted Site
In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker could craft a malicious URL using the returnto parameter of the Splunk Web login endpoint. When an authenticated user...
Splunk Enterprise 9.2.0 < 9.2.9, 9.3.0 < 9.3.7, 9.4.0 < 9.4.5, 10.0.0 < 10.0.1 (SVD-2025-1101)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-1101 advisory. - In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5,...
PT-2025-45392
Name of the Vulnerable Software and Affected Versions Splunk Enterprise affected versions not specified Description A lack of proper input validation in the dashboard label or path can enable an attacker to cause a device error, potentially leading to information disclosure or data manipulation...
Splunk Web Unauthorized Access
The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise relates to access control errors. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
Splunk Web Arbitrary JavaScript Execution
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...
Splunk Web DoS
The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to improper restrictions on XML links. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
EUVD-2014-3165
Malware in sbrugna...
EUVD-2010-2506
Malware in sbrugna...
EUVD-2014-8142
Malware in sbrugna...
EUVD-2017-8234
Malware in sbrugna...
EUVD-2010-2507
Malware in sbrugna...
EUVD-2013-6575
Malware in sbrugna...
EUVD-2016-1317
Malware in sbrugna...
EUVD-2016-5840
Malware in sbrugna...
EUVD-2018-19158
Malware in sbrugna...