Skip to content

Product

com.splunk.splunkins/splunk-devops vulnerabilities

1 published CVE affecting com.splunk.splunkins/splunk-devops, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest com.splunk.splunkins/splunk-devops CVEs

Newest publication first

  1. CVE-2019-10390 Jenkins Splunk Plugin Sandbox Bypass

    Published
    HighCVSS 8.8 EPSS 1.9%

    A sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and earlier allowed attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.