Gabriel Nitu, Splunk

Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise

Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit

Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit

Use of Hard-coded Credentials in Container Connections in Splunk AI Toolkit

Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud

Information Exposure through REST API Endpoints in Splunk Secure Gateway

Missing Authorization through REST API Endpoints in Splunk Secure Gateway

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise