Approved changes feed: RSS · Atom

cpe:2.3:a:splunk:add-on_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSplunk (0f7ef08f-e3f5-59a4-ba5f-26afb7835b46)
ProductAdd On Builder (7bf0b976-ef85-55d1-99f6-d3df04c18a45)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46231 vulnerable 2026-06-03 14:53:09.421992 Session Token Disclosure to Internal Log Files in Splunk Add-on Builder
HIGH (8.8)
In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.
Published: 2024-01-30T17:00:46.832Z
Updated: 2025-02-28T11:03:46.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46230 vulnerable 2026-06-03 14:53:09.421441 Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder
HIGH (8.2)
In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
Published: 2024-01-30T17:00:49.161Z
Updated: 2025-05-30T18:47:36.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22943 vulnerable 2026-06-03 14:49:20.598877 Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK
MEDIUM (4.8)
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.
Published: 2023-02-14T17:22:40.690Z
Updated: 2025-02-28T11:03:49.432Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.