Skip to content
OpenAdvisories

Package · Maven

com.splunk:splunk-otel-javaagent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-h8w2-rv57-vc6f

    splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution

    In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. An attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this to potenti…

    com.splunk:splunk-otel-javaagent Maven