Gabriel Nitu, Splunk

Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise

Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise

Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise

Log Injection through the REST API in Splunk App for Splunk O11y Cloud

Missing Access Control through the REST API in Splunk Secure Gateway

Improper Input Validation of Native Splunk Usernames through the REST API in Splunk Enterprise

Authorization Bypass in SPL2 Module Permissions in Splunk Enterprise

Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

Improper Access Control through the REST API in Splunk Enterprise

Insecure Default Access Control List through the REST API in Splunk Secure Gateway