Skip to content
OpenAdvisories

Product · Splunk

Splunk Enterprise Security (ES)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-22164

    Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments

    In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker ca…

    Splunk Splunk Enterprise Security (ES)
  • Medium 6.5
    CVE-2024-22165

    Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation

    In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is de…

    Splunk Splunk Enterprise Security (ES)