Gabriel Nitu, Splunk

Use of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway

Structured Query Language (SQL) Injection through the REST API in Splunk Enterprise

Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise

Improper Privilege Management through Agent Run History in Splunk AI Toolkit

Path Traversal through App Installation Tar Extraction in Splunk SOAR

Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR

Information Disclosure through Missing Authorization in the Health REST API in Splunk SOAR

Server-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAR

Information Disclosure through the REST API in Splunk SOAR

Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR