Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-40592

In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can result in reflected cross-site scripting (XSS) on the “/app/search/table” web endpoint. Exploitation of this vulnerability can lead to the execution of arbitrary commands on the Splunk platform instance.

Published

2023-08-30T17:15:09.763

Last Modified

2024-11-21T08:19:46.990

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.4 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-79
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application splunk splunk < 8.2.12 Yes
Application splunk splunk < 9.0.6 Yes
Application splunk splunk 9.1.0 Yes
Application splunk splunk_cloud_platform ≤ 9.0.2305.100 Yes
References