Skip to content
OpenAdvisories
High · 7.7 CVE-2023-32706 EUVD-2023-36933GHSA-q2jq-j2q9-j85c

Denial Of Service due to Untrusted XML Tag in XML Parser within SAML Authentication

Published Jun 1, 2023 · Updated Feb 28, 2025 · Assigned by Splunk

Vendor: Splunk Product: Splunk Cloud Platform Product: Splunk Enterprise

Description

On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause a denial of service in the Splunk daemon.

Affected products

VendorProductAffectedFixed
Splunk Splunk Enterprise 8.1 – < 8.1.14, 8.2 – < 8.2.11, 9.0 – < 9.0.5 8.1.14
Splunk Splunk Cloud Platform 9.0.2303 and below – < 9.0.2303.100 9.0.2303.100

Advisories 1

References