I am familiar with the vulnerability/advisories for splunk here: https://advisory.splunk.com/advisories
However, this appears to be primarily for splunk for splunk developed apps. I have yet to see one show up for add-ons or 3rd party apps. Is there a place where I can find if there are advisories or vulnerabilities reported for apps and add-ons?
Hi
those are just for splunk platform. All 3rd party apps and add-ons advice should come from developers of those apps.
r. Ismo
Is there a standard place where those developers of those apps report those vulnerabilities? I see there are 'Release Notes' for each new add-on/app release, but those are pretty generic sometimes and will say 'fixed a security issue'. This doesn't quite cut it, but maybe is the best there is to offer?
Unfortunately I afraid that there is not this kind of place.