Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Splunk Cloud 9.0.2305.200 Clear all filters
TI-2023-21395 CVE-2023-40597 · GHSA-prvp-v5vw-h6ph

Absolute Path Traversal in Splunk Enterprise Using runshellscript.py

Priority MEDIUM 40

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00234 Published 2023-08-30 Fixed in 8.2.12, 9.0.6 +2 CWE-36
TI-2023-21390 CVE-2023-40592 · GHSA-8gcf-q856-6j97

Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint

Priority LOW 39

In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the “/app/search/table” web endpoint.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00566 Published 2023-08-30 Fixed in 8.2.12, 9.0.6 +2 CWE-79
TI-2023-21393 CVE-2023-40595 · GHSA-g4h3-62x9-fwxw

Remote Code Execution via Serialized Session Payload

Priority MEDIUM 40

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00901 Published 2023-08-30 Fixed in 8.2.12, 9.0.6 +2 CWE-502
TI-2023-21396 CVE-2023-40598 · GHSA-5ghx-2vfx-7347

Command Injection in Splunk Enterprise Using External Lookups

Priority MEDIUM 42

In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00852 Published 2023-08-30 Fixed in 8.2.12, 9.0.6 +2 CWE-77