Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Cloud Platform 9.1.2308.207, 9.1.2312.109 Clear all filters
TI-2024-24529 CVE-2024-36982 · GHSA-2m84-pxgc-c9vw

Denial of Service through null pointer reference in “cluster/config” REST endpoint

Priority LOW 39

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer reference on the cluster/config REST endpoint,…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00495 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +3 CWE-476
TI-2024-24530 CVE-2024-36983 · GHSA-62xc-vffq-mcgg

Command Injection using External Lookups

Priority MEDIUM 42

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user could create an external lookup that calls a legacy internal func…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00996 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +3 CWE-77