Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Cloud Platform 9.1.2312.200 Clear all filters
TI-2024-24535 CVE-2024-36989 · GHSA-x3vh-gwhf-vr8w

Low-privileged user could create notifications in Splunk Web Bulletin Messages

Priority LOW 29

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splunk roles could create notifications in S…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00277 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +2 CWE-284
TI-2024-24534 CVE-2024-36987 · GHSA-536f-3wcm-q222

Insecure File Upload in the indexing/preview REST endpoint

Priority LOW 31

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admin or power Splunk roles could upload a f…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00291 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +2 CWE-434