Known vulnerabilities in Splunk Cloud Platform
Vendor:
Splunk Inc.
Software:
Splunk Cloud Platform
Software CPE:
cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*
Website:
https://www.splunk.com/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77074 - Uncaught Exception CVE-2023-22941 |
CWE-248 | Medium | 9.0.2212 | 07.06.2023 |
SB2023060726 |
||
| #VU77069 - Improper input validation CVE-2023-22939 |
CWE-20 | High | 9.0.2209.3 | 07.06.2023 |
SB2023060727 |
||
| #VU77067 - Server-Side Request Forgery (SSRF) CVE-2023-22936 |
CWE-918 | Medium | 9.0.2209.3 | 07.06.2023 |
SB2023060727 |
||
| #VU77064 - Improper input validation CVE-2023-22935 |
CWE-20 | High | 9.0.2209.3 | 07.06.2023 |
SB2023060727 |
||
| #VU77063 - Improper input validation CVE-2023-22934 |
CWE-20 | Medium | 9.0.2209.3 | 07.06.2023 |
SB2023060727 |
||
| #VU77062 - Improper Authorization CVE-2023-22931 |
CWE-285 | Low | 8.2.2203 | 07.06.2023 |
SB2023060728 |
||
| #VU77061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-22933 |
CWE-79 | Medium | 9.0.2209 | 07.06.2023 |
SB2023060729 |