Cloud vulnerabilities

3 known vulnerabilities in Cloud from Splunk. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Splunk Enterprise: NULL Pointer Dereference

  CVE-2024-36982Jul 1, 2024Splunk

  In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer reference on the cluster/config REST endpoint, which could result in a crash of the Sp

• 8.1 High severity

  Splunk Enterprise: Improper Neutralization of Special Elements used in a Command

  CVE-2024-29946Mar 27, 2024Splunk

  In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the Dashboard Examples Hub lacks protections for risky SPL commands. This could let attackers bypass SPL safeguards for risky commands in the Hub. The vulnerability would require the attacker to phis

• 8.8 High severity

  Splunk Enterprise: XML Injection

  CVE-2023-46214Nov 16, 2023SplunkEPSS 89.2%

  In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execu