← Back

Add On Builder

add-on_builder

Vendor: Splunk • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Splunk
1Add On Builder
Jun 17, 2026
Jan 30, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.
1Splunk
1Add On Builder
Jun 17, 2026
Jan 30, 2024
N/A· v4
4.9 MEDIUM· v3
N/A· v2
In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
1Splunk
2Add On Builder
Cloudconnect Software Development Kit
Jun 17, 2026
Feb 14, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after...Show more
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.Show less