Gabriel Nitu, Splunk

Improper Access Control during App Downloads in Splunk SOAR

Sensitive Information Disclosure through Automation Broker Configuration in Splunk SOAR

Missing Authorization through the REST API in Splunk SOAR

Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR

Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

SPL Injection through the REST API in Splunk Secure Gateway

Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud

Improper Access Control in Search Job Retrieval through the REST API in Splunk Enterprise