Skip to content
OpenAdvisories

Product · Splunk

Universal Forwarder

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2023-32712

    Unauthenticated Log Injection in Splunk Enterprise

    In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files that, when a vulnerable terminal application reads them, can potentially, at worst, resu…

    Splunk Splunk Enterprise Universal Forwarder
  • High 8.1
    CVE-2022-32156

    Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation

    In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates while connecting to a remote Splunk platform instance by default. After updating to version 9.0, see Configure TLS host…

    Splunk Splunk Enterprise Universal Forwarder