Splunk Splunk Cloud
11 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-23676 | - – < 9.1.2308.200 | Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command | MEDIUM 4.6 | 0.3 % | ||
| CVE-2024-23677 | - – < 9.0.2208 | Server Response Disclosure in RapidDiag Salesforce.com Log File | MEDIUM 5.3 | 0.4 % | ||
| CVE-2024-23675 | - – < 9.1.2312.100 | Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-46213 | - – < 9.1.2308 | Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page | MEDIUM 4.8 | 0.5 % | ||
| CVE-2023-46214 | - – < 9.1.2308 | Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing | HIGH 8.8 | 89 % | ||
| CVE-2023-40597 | - – < 9.0.2305.200 | Absolute Path Traversal in Splunk Enterprise Using runshellscript.py | HIGH 8.8 | 0.2 % | ||
| CVE-2023-40593 | - – < 9.0.2205 | Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request | HIGH 7.5 | 0.6 % | ||
| CVE-2023-40594 | - – < 9.0.2303.100 | Denial of Service (DoS) via the ‘printf’ Search Function | HIGH 7.5 | 0.4 % | ||
| CVE-2023-40592 | - – < 9.0.2305.200 | Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint | HIGH 8.4 | 0.6 % | ||
| CVE-2023-40595 | - – < 9.0.2305.200 | Remote Code Execution via Serialized Session Payload | HIGH 8.8 | 0.9 % | ||
| CVE-2023-40598 | - – < 9.0.2305.200 | Command Injection in Splunk Enterprise Using External Lookups | HIGH 8.8 | 0.9 % |