Splunk Cloud vulnerabilities

6 known vulnerabilities in Splunk Cloud from Splunk. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Splunk Enterprise: XML Injection

  CVE-2023-46214Nov 16, 2023SplunkEPSS 89.2%

  In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execu

• 8.8 High severity

  Splunk Enterprise: Missing Authentication for Critical Functionality

  CVE-2023-40598Aug 30, 2023Splunk

  In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker can create an external lookup that calls a legacy internal function. The attacker can use this internal function to insert code into the Splunk platform installation directory. From ther

• 8.8 High severity

  Splunk Enterprise: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-40597Aug 30, 2023Splunk

  In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.

• 8.8 High severity

  Splunk Enterprise: Deserialization of Untrusted Data

  CVE-2023-40595Aug 30, 2023Splunk

  In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacker can use the query to execute arbitrary code.

• 7.5 High severity

  Splunk Enterprise: Uncontrolled Resource Consumption

  CVE-2023-40594Aug 30, 2023Splunk

  In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against the Splunk Enterprise instance.

• 7.5 High severity

  Splunk Enterprise: Uncontrolled Resource Consumption

  CVE-2023-40593Aug 30, 2023Splunk

  In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the `/saml/acs` REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemo