CL
Product
Cloud
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 1
Watch
Add Cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46214 | 8.8 | Nov 16 | In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply Affected: before 9.1.2308 |
| CVE-2024-36982 | 7.5 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer… Affected: 9.1.2308 before 9.1.2308.207; 9.1.2312.100 before 9.1.2312.109 |
| CVE-2024-36987 | 6.5 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the… Affected: 9.1.2312 before 9.1.2312.200 |
| CVE-2024-23675 | 6.5 | Jan 22 | In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming… Affected: before 9.1.2312.100 |
| CVE-2024-36986 | 5.7 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands… Affected: 9.1.2308 before 9.1.2308.207; 9.1.2312 before 9.1.2312.200 |
| CVE-2024-23677 | 5.3 | Jan 22 | In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file Affected: before 9.0.2208 |
| CVE-2023-46213 | 4.8 | Nov 16 | In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web… Affected: before 9.1.2308 |
| CVE-2024-36989 | 4.3 | Jul 1 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power… Affected: 9.1.2312 before 9.1.2312.200 |
| CVE-2024-23676 | 3.5 | Jan 22 | In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view Affected: before 9.1.2308.200 |
Showing 9