Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Splunk Cloud Platform 9.0.2212 Clear all filters
TI-2023-09073 CVE-2023-22941 · GHSA-56x4-8xcj-44r6

Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

Priority LOW 35

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field Transformation crashes the Splunk daemon (splunkd).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01028 Published 2023-02-14 Fixed in 8.1.13, 8.2.10 +2 CWE-248
TI-2023-09072 CVE-2023-22940 · GHSA-h6fv-f2m3-r3mm

SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise

Priority LOW 28

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘sumindex’, ‘stash’,’ mcollect’, and ‘meventcollect’, were not d…

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00429 Published 2023-02-14 Fixed in 8.1.13, 8.2.10 +2 CWE-20