Cloud (Splunk) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2024-07-01. Vendor: Splunk.
CVEs of Cloud
- CVE-2024-36989 - CVSS 7.1 (high), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold…
- CVE-2024-36987 - CVSS 6.5 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who…
- CVE-2024-36982 - CVSS 7.5 (high), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger…
- CVE-2024-36986 - CVSS 6.3 (medium), 2024-07-01: In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user…
- CVE-2024-29946 - CVSS 8.1 (high), 2024-03-27: In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers…
- CVE-2024-23676 - CVSS 4.6 (medium), 2024-01-22: In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to…
- CVE-2024-23675 - CVSS 6.5 (medium), 2024-01-22: In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST…
- CVE-2024-23677 - CVSS 5.3 (medium), 2024-01-22: In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.
- CVE-2023-46213 - CVSS 4.8 (medium), 2023-11-16: In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized…
- CVE-2023-46214 - CVSS 8.8 (high), 2023-11-16: In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that…
