In Splunk Enterprise 9.0 versions before 9.0.4, a View allows for Cross-Site Scripting (XSS) through the error message in a Base64-encoded image. The vulnerability affects instances with Splunk Web en ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13 and 8.2.10, the âcreaterssâ external search command overwrites existing Resource Description Format Site Summary (RSS) feeds without verifying perm ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the âpivotâ search processing language (SPL) command lets a search bypass [SPL safeguards for risky commands](https://docs.splu ...
Continue Reading
February 14, 2023
The Hawk Console component of TIBCO Software Inc.'s TIBCO Hawk and TIBCO Operational Intelligence Hawk RedTail contains a vulnerability that will return the EMS transport password and EMS SSL password ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the âdisplay.page.search.patterns.sensitivityâ search parameter lets a search bypass [SPL safeguards for risky commands](https: ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the âcollectâ search processing language (SPL) command, including âsummaryindexâ, âsumindexâ, â ...
Continue Reading
February 14, 2023
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extensions. Lookup table file extensions may no ...
Continue Reading
February 14, 2023
Backstage is an open platform for building developer portals. `@backstage/catalog-model` prior to version 1.2.0, `@backstage/core-components` prior to 0.12.4, and `@backstage/plugin-catalog-backend` p ...
Continue Reading
February 14, 2023
Back to Main
