Splunk developers has released security updates to address multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, security restriction bypass and denial of service condition on the targeted system. The vulnerabilities were fixed in Splunk Enterprise 10.2.2, 10.0.5, 9.4.11, 9.3.12, Splunk Cloud Platform 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, 10.0.2503.13 and Splunk AI Toolkit 5.7.3. Additionally, the company rolled out fixes for bugs in third-party packages in Splunk Enterprise, AppDynamics Apache Web Server Agent, AppDynamics Analytics Agent, AppDynamics Database Agent, AppDynamics Cluster Agent, AppDynamics Python Agent, AppDynamics Private Synthetic Agent, AppDynamics Java Agent, AppDynamics Machine Agent, User Behavior Analytics, Add-on for Tomcat app and Universal Forwarder.

More information on vulnerabilities and updates is available in the Splunk security advisories - splunk.com