NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Splunk
view advisory published 2024-07-02
De ontwikkelaars van Splunk hebben kwetsbaarheden verholpen in Splunk en Splunk Enterprise.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-36997US | high8.1 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in t… | ||||
| CVE-2024-36996US | medium5.3 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not another user exists o… | ||||
| CVE-2024-36995US | low3.5OT elevated | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36994US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36993US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36992US | medium5.4 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the ad… | ||||
| CVE-2024-36991US | high7.5 | Exploit | ||
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Wind… | ||||
| CVE-2024-36990US | medium6.5 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.2.2403.100, an authenticated, low-privileged user that does not hold the adm… | ||||
| CVE-2024-36989US | medium4.3 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, a low-privileged user that does not hold the admin or power Splu… | ||||
| CVE-2024-36987US | medium6.5 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admi… | ||||
| CVE-2024-36986US | medium5.7 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands… | ||||
| CVE-2024-36985US | high8.8 | Exploit | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through a… | ||||
| CVE-2024-36984US | high8.8 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then use to serialize untrust… | ||||
| CVE-2024-36983US | high8.8 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user could create an external… | ||||
| CVE-2024-36982US | high7.5 | — | ||
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an attacker could trigger a null pointer refere… | ||||
02
references
External citations — patches, advisories, analysis.
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
- Reference - certbundde; cveprojectv5; nvdexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan