Summary
Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
Product
Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.
Vulnerabilities 11
-
Critical 9.1
Unexpected session resumption in crypto/tls
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user ca…
-
High 8.6
Potential code smuggling via doc comments in cmd/cgo
A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
-
High 7.8
Arbitrary file write using cgo pkg-config directive in cmd/go
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config com…
-
High 7.5
Memory exhaustion in query parameter parsing in net/url
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encode…
-
High 7.5
Expr has Denial of Service via Unbounded Recursion in Builtin Functions
Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforc…
-
High 7.5
Sensitive Information Disclosure through Log Files in Splunk Enterprise
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodi…
-
High 7.5
Sending certain HTTP/2 frames can cause a server to panic in golang.org/x/net
Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic
-
High 7.1
Denial of Service through coldToFrozen.sh Script in Splunk Enterprise
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21, 10.0.2503.13, and 9.3.2411.129, a low-privileged user that does not hold the ‘admin’ or ‘pow…
-
Medium 6.5
Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse func…
-
Medium 5.3
Quadratic parsing complexity in golang.org/x/net/html
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
-
Medium 5.3
Infinite parsing loop in golang.org/x/net
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.
Revision history
-
#10
Neue Updates von Splunk-SVD aufgenommen
-
#9
Neue Updates von IBM aufgenommen
-
#8
Neue Updates von Splunk-SVD aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Splunk-SVD aufgenommen
-
#5
Neue Updates von openSUSE aufgenommen
-
#4
Neue Updates von Red Hat aufgenommen
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Neue Updates von Ubuntu und SUSE aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2026:34342 vom 2026-07-01
https://access.redhat.com/errata/RHSA-2026:34342
-
Splunk Security Advisory SVD-2026-0503 vom 2026-05-20
https://advisory.splunk.com//advisories/SVD-2026-0503
-
Splunk Security Advisory SVD-2026-0504 vom 2026-05-20
https://advisory.splunk.com//advisories/SVD-2026-0504
-
Splunk Security Advisory SVD-2026-0505 vom 2026-05-20
https://advisory.splunk.com//advisories/SVD-2026-0505
-
Ubuntu Security Notice USN-8430-1 vom 2026-06-16
https://ubuntu.com/security/notices/USN-8430-1
-
SUSE Security Update SUSE-SU-2026:2401-1 vom 2026-06-15
https://lists.suse.com/pipermail/sle-security-updates/2026-June/026757.html
-
SUSE Security Update SUSE-SU-2026:2400-1 vom 2026-06-15
https://lists.suse.com/pipermail/sle-security-updates/2026-June/026758.html
-
openSUSE Security Update OPENSUSE-SU-2026:21210-1 vom 2026-07-03
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MPOC3LAW5YASRDHILXFSDFHURE4PM7PP/
-
Red Hat Security Advisory RHSA-2026:26519 vom 2026-06-17
https://access.redhat.com/errata/RHSA-2026:26519
-
Red Hat Security Advisory RHSA-2026:26538 vom 2026-06-17
https://access.redhat.com/errata/RHSA-2026:26538
-
Splunk Security Advisory SVD-2026-0705 vom 2026-07-15
https://advisory.splunk.com//advisories/SVD-2026-0705
-
Red Hat Security Advisory RHSA-2026:43692 vom 2026-07-22
https://access.redhat.com/errata/RHSA-2026:43692
-
Splunk Security Advisory SVD-2026-1003 vom 2026-10-07
https://advisory.splunk.com/advisories/SVD-2026-1003
-
IBM Security Bulletin 7292374 vom 2026-10-14
https://www.ibm.com/support/pages/node/7292374
-
Splunk Security Advisory SVD-2026-1009 vom 2026-10-22
https://advisory.splunk.com/advisories/SVD-2026-1009