Skip to content
OpenAdvisories
High WID-SEC-2023-2964 12 CVEs

Splunk Enterprise: Mehrere Schwachstellen

Published Nov 16, 2023 · Updated Jul 24, 2025 · Revision 19 · de-DE

Vendor: amazon Vendor: Dell Vendor: Fedora Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: Splunk Vendor: Xerox Product: AIX Product: Enterprise Product: Enterprise Linux Product: FreeFlow Print Server Product: Linux Product: Linux Product: Linux 2 Product: MQ Product: NetWorker Product: QRadar SIEM Product: Splunk Enterprise Product: VIOS Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Code auszuführen und um nicht näher spezifizierte Auswirkungen zu erzielen.

Product

Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.

Vulnerabilities 12

  • Critical 9.8
    CVE-2022-31799

    Denial of service in bottle

    Bottle before 0.12.20 mishandles errors during early request binding.

    python-bottle bottle python-bottle py3-bottle Debian Ubuntu Alpine PyPI
  • High 8.0
    CVE-2023-46214 Public exploit EPSS 89%

    Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

    In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code exec…

    Splunk Splunk Enterprise Splunk Cloud
  • High 7.5
    CVE-2023-24329 Public exploit EPSS 20%

    An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-37920

    Certifi's removal of e-Tugra root certificate

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were…

    certifi python-certifi python-pip certifi Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • Medium 6.5
    CVE-2021-22570

    Nullptr Dereference in Protobuf

    Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is …

    Google Protobuf mysql druid Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 5.9
    CVE-2023-43804 Public exploit

    `Cookie` HTTP header isn't stripped on cross-origin redirects

    urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `C…

    urllib3 urllib3 python3 dask-gateway Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • Medium 5.3
    CVE-2022-25883

    semver vulnerable to Regular Expression Denial of Service

    Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

    nodejs js-jquery nodejs18 nodejs-nodemon Debian Ubuntu Azure Linux npm
  • Medium 5.3
    CVE-2023-3446

    Excessive time spent checking DH keys and parameters

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-3817

    Excessive time spent checking DH q parameter value

    Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2023-44270

    PostCSS line return parsing error

    An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by Po…

    node-postcss node-postcss postcss Debian Ubuntu npm
  • Medium 4.8
    CVE-2023-46213

    Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page

    In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web browser.

    Splunk Splunk Enterprise Splunk Cloud
  • Medium 4.2
    CVE-2023-45803

    Request body not stripped after redirect in urllib3

    urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status 301, 302, or 303 after the request had its method changed from one that could accept a request body…

    urllib3 urllib3 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Revision history

  1. #19

    Neue Updates von IBM aufgenommen

  2. #18

    Neue Updates von Red Hat aufgenommen

  3. #17

    Neue Updates von Oracle Linux aufgenommen

  4. #16

    Neue Updates von Fedora aufgenommen

  5. #15

    Neue Updates von Splunk-SVD aufgenommen

  6. #14

    Neue Updates von Splunk-SVD aufgenommen

  7. #13

    Neue Updates von Dell und Splunk-SVD aufgenommen

  8. #12

    Neue Updates von Oracle Linux aufgenommen

  9. #11

    Neue Updates von IBM aufgenommen

  10. #10

    Neue Updates von Red Hat aufgenommen

  11. #9

    Neue Updates von Red Hat aufgenommen

  12. #8

    Neue Updates von XEROX aufgenommen

  13. #7

    Neue Updates von IBM aufgenommen

  14. #6

    Neue Updates von Red Hat aufgenommen

  15. #5

    Neue Updates von Splunk-SVD aufgenommen

  16. #4

    Neue Updates von Amazon aufgenommen

  17. #3

    Neue Updates von IBM aufgenommen

  18. #2

    PoC aufgenommen

  19. #1

    Initiale Fassung

References