Splunk Splunk Cloud vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 20243

Newest CVEs

• CVE-2024-23676

  Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command

  Splunk · Splunk Enterprise

  Medium4.6
• CVE-2024-23677

  Server Response Disclosure in RapidDiag Salesforce.com Log File

  Splunk · Splunk Enterprise

  Medium4.3
• CVE-2024-23675

  Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion

  Splunk · Splunk Enterprise

  Medium6.5
• CVE-2023-46213

  Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page

  Splunk · Splunk Enterprise

  Medium4.8
• CVE-2023-46214

  Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

  Splunk · Splunk Enterprise

  High8.0
• CVE-2023-40597

  Absolute Path Traversal in Splunk Enterprise Using runshellscript.py

  Splunk · Splunk Enterprise

  High7.8
• CVE-2023-40593

  Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request

  Splunk · Splunk Enterprise

  Medium6.3
• CVE-2023-40594

  Denial of Service (DoS) via the ‘printf’ Search Function

  Splunk · Splunk Enterprise

  Medium6.5
• CVE-2023-40592

  Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint

  Splunk · Splunk Enterprise

  High8.4
• CVE-2023-40595

  Remote Code Execution via Serialized Session Payload

  Splunk · Splunk Enterprise

  High8.8