Splunk Enterprise vulnerabilities

• splunk, splunk enterprise +1 more Remote Code Execution (RCE) due to insecure session storage configuration in Splunk Enterprise on Windows CVE-2024-45733 8.8 HighOctober 14, 2024
• splunk, splunk cloud platform, enterprise +2 more Low-privileged user could run search as nobody in SplunkDeploymentServerConfig app CVE-2024-45732 7.1 HighOctober 14, 2024
• splunk, splunk cloud platform, enterprise +2 more Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon CVE-2024-45736 6.5 MediumOctober 14, 2024
• splunk, splunk cloud platform, enterprise +2 more Persistent Cross-Site Scripting (XSS) via props.conf on Splunk Enterprise CVE-2024-45741 EPSS 14.8% 5.4 MediumOctober 14, 2024
• splunk, splunk enterprise +1 more Low Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic Dashboard CVE-2024-45734 4.3 MediumOctober 14, 2024
• splunk, splunk enterprise +1 more Potential Remote Command Execution (RCE) through arbitrary file write to Windows system root directory when Splunk Enterprise for Windows is installed on a separate disk CVE-2024-45731 8.0 HighOctober 14, 2024
• splunk, splunk enterprise, secure gateway +1 more +3 more Improper Access Control for low-privileged user in Splunk Secure Gateway App CVE-2024-45735 4.3 MediumOctober 14, 2024
• splunk cloud, splunk, splunk cloud platform +1 more +3 more Denial of Service through null pointer reference in “cluster/config” REST endpoint CVE-2024-36982 7.5 HighJuly 1, 2024
• splunk, splunk cloud platform, enterprise +2 more Information Disclosure of user names CVE-2024-36996 5.3 MediumJuly 1, 2024
• splunk, splunk enterprise, cloud +2 more Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing CVE-2023-46214 Public exploit EPSS 89.2% 8.0 HighNovember 16, 2023