CVE-2023-40595
30.08.2023, 17:15
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacker can use the query to execute arbitrary code.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| splunk | splunk | 8.2.0 ≤ 𝑥 < 8.2.12 |
| splunk | splunk | 9.0.0 ≤ 𝑥 < 9.0.6 |
| splunk | splunk | 9.1.0 |
| splunk | splunk_cloud_platform | 𝑥 ≤ 9.0.2305.100 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration