Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Splunk Enterprise 9.1.7, 9.2.4, 9.3.2 Clear all filters
TI-2024-35713 CVE-2024-53244 · GHSA-6599-24wh-q2vp

Risky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameter

Priority LOW 26

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.2.2406.107, 9.2.2403.109, and 9.1.2312.206, a low-privileged user that does not hold the “admin“ or “power“ Splunk ro…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.0047 Published 2024-12-10 Fixed in 9.3.2, 9.2.4 +4 CWE-200
TI-2024-35715 CVE-2024-53246 · GHSA-99f4-87g4-qw2h

Sensitive Information Disclosure through SPL commands

Priority LOW 33

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive informati…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00286 Published 2024-12-10 Fixed in 9.3.2, 9.2.4 +5 CWE-319
TI-2024-35712 CVE-2024-53243 · GHSA-c93m-w54c-8g9x

Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway

Priority LOW 20

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00294 Published 2024-12-10 Fixed in 9.3.2, 9.2.4 +4 CWE-200
TI-2024-35716 CVE-2024-53247 · GHSA-529c-hjgw-g8wj

Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway app

Priority MEDIUM 42

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7, and versions below 3.4.261 and 3.7.13 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01077 Published 2024-12-10 Fixed in 9.3.2, 9.2.4 +3 CWE-502