Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Splunk AD LDAP app for Splunk SOAR 2.3.8 Clear all filters
TI-2026-53430 CVE-2026-76375 · GHSA-44mh-ph29-xgxx

Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR

Priority LOW 23

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that causes the full connector process environme…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00295 Published 2026-08-19 Fixed in 2.3.8 CWE-532
TI-2026-53429 CVE-2026-76374 · GHSA-jrh7-gp79-87r9

Information Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR

Priority LOW 20

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be written to a persistent debug log file by trig…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00295 Published 2026-08-19 Fixed in 2.3.8 CWE-532
TI-2026-53428 CVE-2026-76373 · GHSA-5g3m-gvfm-wfx3

Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR

Priority LOW 24

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory query to enumerate Active Directory objects, includin…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00251 Published 2026-08-19 Fixed in 2.3.8 CWE-90