DeutschShown in its original language — a full translation is planned for a future version.
Splunk Enterprise: Mehrere Schwachstellen
view advisory published 2024-07-01
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, mehrere Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen preiszugeben
01
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-36997US | high8.1 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in t… | ||||
| CVE-2024-36996US | medium5.3 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not another user exists o… | ||||
| CVE-2024-36995US | low3.5OT elevated | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36994US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36993US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36992US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36991US | high7.5 | Exploit | ||
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Wind… | ||||
| CVE-2024-36990US | medium6.5 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an authenticated, low-privileged user that does not hold the adm… | ||||
| CVE-2024-36989US | medium4.3 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splu… | ||||
| CVE-2024-36987US | medium6.5 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admi… | ||||
| CVE-2024-36986US | medium5.7 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands… | ||||
| CVE-2024-36985US | high8.8 | Exploit | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through a… | ||||
| CVE-2024-36984US | high8.8 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then use to serialize untrust… | ||||
| CVE-2024-36983US | high8.8 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user could create an external… | ||||
| CVE-2024-36982US | high7.5 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer refere… | ||||
| CVE-2023-33733US | high7.8 | Exploit | ||
Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. | ||||
02
references
External citations — patches, advisories, analysis.
- Splunk Security Advisory vom 2024-07-01external
- Splunk Security Advisory vom 2024-07-01external
- Splunk Security Advisory vom 2024-07-01external
- Splunk Security Advisory vom 2024-07-01external
- Splunk Security Advisory vom 2024-07-01external
- Splunk Security Advisory vom 2024-07-01external
- Splunk Security Advisory vom 2024-07-01external
- Splunk Security Advisory vom 2024-07-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan