Splunk Splunk Cloud

• CVE-2024-23676 Medium 4.6 Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command 0.3%
• CVE-2024-23677 Medium 4.3 Server Response Disclosure in RapidDiag Salesforce.com Log File 0.4%
• CVE-2024-23675 Medium 6.5 Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion 0.4%
• CVE-2023-46213 Medium 4.8 Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page 0.5%
• CVE-2023-46214 High 8.0 Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing 89.2%
• CVE-2023-40597 High 7.8 Absolute Path Traversal in Splunk Enterprise Using runshellscript.py 0.2%
• CVE-2023-40593 Medium 6.3 Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request 0.6%
• CVE-2023-40594 Medium 6.5 Denial of Service (DoS) via the ‘printf’ Search Function 0.4%
• CVE-2023-40592 High 8.4 Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint 0.6%
• CVE-2023-40595 High 8.8 Remote Code Execution via Serialized Session Payload 0.9%
• CVE-2023-40598 High 8.5 Command Injection in Splunk Enterprise Using External Lookups 0.9%