Vulnerabilities

TI-2024-14765 CVE-2024-22164 · GHSA-5q6v-3768-8xq7

Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments

LOW 20

In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00457 Published 2024-01-09 Fixed in 7.3.0, 7.2.0 +1 CWE-400

TI-2024-14766 CVE-2024-22165 · GHSA-w48w-95mf-vvc4

Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation

LOW 29

In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00516 Published 2024-01-09 Fixed in 7.3.0, 7.2.0 +1 CWE-20

Vulnerabilities

Filters

Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments

Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation