Splunk Splunk Enterprise

• CVE-2023-40594 Medium 6.5 Denial of Service (DoS) via the ‘printf’ Search Function 0.4%
• CVE-2023-40592 High 8.4 Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint 0.6%
• CVE-2023-40595 High 8.8 Remote Code Execution via Serialized Session Payload 0.9%
• CVE-2023-40598 High 8.5 Command Injection in Splunk Enterprise Using External Lookups 0.9%
• CVE-2023-32709 Medium 4.3 Low-privileged User can View Hashed Default Splunk Password 0.4%
• CVE-2023-32707 High 8.8 ‘edit_user’ Capability Privilege Escalation 78.7%
• CVE-2023-32712 High 8.6 Unauthenticated Log Injection in Splunk Enterprise 0.3%
• CVE-2023-32716 Medium 6.5 Denial of Service via the 'dump' SPL command 0.6%
• CVE-2023-32710 Medium 4.8 Information Disclosure via the ‘copyresults’ SPL Command 0.4%
• CVE-2023-32717 Medium 4.3 Role-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search Results 0.4%
• CVE-2023-32706 High 7.7 Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication 0.6%
• CVE-2023-32711 Medium 5.4 Persistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard View 0.4%
• CVE-2023-32708 High 7.2 HTTP Response Splitting via the ‘rest’ SPL Command 0.7%
• CVE-2023-22939 High 8.1 SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise 0.6%
• CVE-2023-22938 Medium 4.3 Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise 0.4%
• CVE-2023-22937 Medium 4.3 Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise 0.4%
• CVE-2023-22933 High 8.0 Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise 0.8%
• CVE-2023-22942 Medium 5.4 Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise 0.2%
• CVE-2023-22932 High 8.0 Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise 0.4%
• CVE-2023-22936 Medium 6.3 Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise 0.4%
• CVE-2023-22941 Medium 6.5 Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon 1.0%
• CVE-2023-22931 Medium 4.3 ‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise 0.4%
• CVE-2023-22935 High 8.1 SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise 0.6%
• CVE-2023-22934 High 7.3 SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise 1.1%
• CVE-2023-22940 Medium 6.3 SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise 0.4%
• CVE-2022-43572 High 7.5 Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise 1.0%
• CVE-2022-43570 High 8.8 XML External Entity Injection through a custom View in Splunk Enterprise 0.8%
• CVE-2022-43569 High 8.0 Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise 0.9%
• CVE-2022-43568 High 8.8 Reflected Cross-Site Scripting via the radio template in Splunk Enterprise 42.8%
• CVE-2022-43567 High 8.8 Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature 1.6%
• CVE-2022-43566 High 7.3 Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise 1.0%
• CVE-2022-43565 High 8.1 Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise 0.8%
• CVE-2022-43564 Medium 4.9 Denial of Service in Splunk Enterprise through search macros 0.9%
• CVE-2022-43563 High 8.1 Risky command safeguards bypass via rex search command field names in Splunk Enterprise 0.8%
• CVE-2022-43562 Low 3.0 Host Header Injection in Splunk Enterprise 0.6%
• CVE-2022-43571 High 8.8 Remote Code Execution through dashboard PDF generation component in Splunk Enterprise 18.6%
• CVE-2022-43561 Medium 6.4 Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise 0.8%
• CVE-2022-37437 High 7.4 Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation 0.5%
• CVE-2022-37439 Medium 5.5 Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input 0.2%
• CVE-2022-37438 Low 2.6 Information disclosure via the dashboard drilldown in Splunk Enterprise 0.5%
• CVE-2022-32152 High 8.1 Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default 1.0%
• CVE-2022-32156 High 7.4 Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation 0.8%
• CVE-2022-27183 High 8.8 Reflected XSS in a query parameter of the Monitoring Console 0.7%
• CVE-2022-26889 High 8.8 Path Traversal in search parameter results in external content injection 1.5%
• CVE-2022-26070 Medium 4.3 Error message discloses internal path 0.6%
• CVE-2021-42743 High 8.8 Local privilege escalation via a default path in Splunk Enterprise Windows 0.2%
• CVE-2021-33845 Medium 5.3 Username enumeration through lockout message in REST API 0.9%
• CVE-2021-31559 High 7.5 S2S TcpToken authentication bypass 0.9%
• CVE-2021-26253 High 8.1 Bypass of Splunk Enterprise's implementation of DUO MFA 0.8%
• CVE-2021-3422 High 7.5 Indexer denial-of-service via malformed S2S request 0.6%