https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:36:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06390 bdu:2025-06390 https://cve.radiocsirt.org/vuln/bdu:2025-06390 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0473 certfr-2025-avi-0473 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0473 https://cve.radiocsirt.org/vuln/euvd-2026-242492 EUVD-2026-242492 https://cve.radiocsirt.org/vuln/euvd-2026-242492 https://cve.radiocsirt.org/vuln/fkie_cve-2025-20297 <p>In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.</p> <p>In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-20297 https://cve.radiocsirt.org/vuln/ghsa-3r93-v644-8g5h <p>In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.</p> <p>In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the &#34;admin&#34; or &#34;power&#34; Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.</p> https://cve.radiocsirt.org/vuln/ghsa-3r93-v644-8g5h https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1219 <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um seine Rechte zu erweitern.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um seine Rechte zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1219