Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Splunk Cloud Platform 9.1.2308.207, 9.1.2312.200 Clear all filters
TI-2024-24539 CVE-2024-36993 · GHSA-mcvg-m5cf-cpwh

Persistent Cross-site Scripting (XSS) in Web Bulletin

Priority LOW 25

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00373 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +3 CWE-79
TI-2024-24541 CVE-2024-36995 · GHSA-gw8p-7jqv-5v6x

Low-privileged user could create experimental items

Priority LOW 19

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could create e…

CVSS 3.1MEDIUM 4.3 Network Low privileges User interaction EPSS 0.00214 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +3 CWE-862
TI-2024-24538 CVE-2024-36992 · GHSA-6m8w-jqvr-3jhh

Persistent Cross-site Scripting (XSS) in Dashboard Elements

Priority LOW 24

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00306 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +3 CWE-79
TI-2024-24533 CVE-2024-36986 · GHSA-xgxh-897r-pw22

Risky command safeguards bypass through Search ID query in Analytics Workspace

Priority LOW 28

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands using the permissions of a higher-privil…

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00393 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +3 CWE-200
TI-2024-24540 CVE-2024-36994 · GHSA-32hm-m24x-pwrg

Persistent Cross-site Scripting (XSS) in Dashboard Elements

Priority LOW 24

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00302 Published 2024-07-01 Fixed in 9.2.2, 9.1.5 +3 CWE-79