Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-46230

Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Splunk
Products
Add-on Builder
CVE-2023-22943

Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Splunk
Products
Add-on Builder Cloudconnect Software Development Kit
CVE-2023-46231

Session Token Disclosure to Internal Log Files in Splunk Add-on Builder

In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Splunk
Products
Add-on Builder