GCVE - cpe:2.3:a:splunk:splunk_cloud:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:splunk:splunk_cloud:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Splunk (`0f7ef08f-e3f5-59a4-ba5f-26afb7835b46`)
Product	Splunk Cloud (`d1beafb1-b9ae-51e5-a243-7a51f82090cc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-23677`	vulnerable	2026-06-08 06:29:40.246445	Server Response Disclosure in RapidDiag Salesforce.com Log File MEDIUM (4.3) In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file. Published: 2024-01-22T20:37:41.993Z Updated: 2025-02-28T11:03:55.344Z Open on db.gcve.eu Reference links https://advisory.splunk.com/advisories/SVD-2024-0107	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23676`	vulnerable	2026-06-08 06:29:40.245861	Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command MEDIUM (4.6) In Splunk versions below 9.0.8 and 9.1.3, the “mrollup” SPL command lets a low-privileged user view metrics on an index that they do not have permission to view. This vulnerability requires user interaction from a high-privileged user to exploit. Published: 2024-01-22T20:37:42.546Z Updated: 2025-06-17T14:24:05.909Z Open on db.gcve.eu Reference links https://advisory.splunk.com/advisories/SVD-2024-0106 https://research.splunk.com/application/ee69374a-d27e-4136-adac-956a96ff60fd/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-23675`	vulnerable	2026-06-08 06:29:40.243987	Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion MEDIUM (6.5) In Splunk Enterprise versions below 9.0.8 and 9.1.3, Splunk app key value store (KV Store) improperly handles permissions for users that use the REST application programming interface (API). This can potentially result in the deletion of KV Store collections. Published: 2024-01-22T20:37:23.117Z Updated: 2025-02-28T11:03:59.164Z Open on db.gcve.eu Reference links https://advisory.splunk.com/advisories/SVD-2024-0105 https://research.splunk.com/application/8f0e8380-a835-4f2b-b749-9ce119364df0/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46214`	vulnerable	2026-06-08 06:12:44.403664	Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing HIGH (8) In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk Enterprise instance. Published: 2023-11-16T20:15:25.838Z Updated: 2025-12-16T18:23:23.962Z Open on db.gcve.eu Reference links https://advisory.splunk.com/advisories/SVD-2023-1104 https://research.splunk.com/application/a053e6a6-2146-483a-9798-2d43652f3299/ https://research.splunk.com/application/6cb7e011-55fb-48e3-a98d-164fa854e37e/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46213`	vulnerable	2026-06-08 06:12:44.402292	Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page MEDIUM (4.8) In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web browser. Published: 2023-11-16T20:15:46.739Z Updated: 2025-02-28T11:03:42.823Z Open on db.gcve.eu Reference links https://advisory.splunk.com/advisories/SVD-2023-1103 https://research.splunk.com/application/1030bc63-0b37-4ac9-9ae0-9361c955a3cc/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40598`	vulnerable	2026-06-08 06:11:03.934386	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40597`	vulnerable	2026-06-08 06:11:03.933485	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40595`	vulnerable	2026-06-08 06:11:03.927944	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40594`	vulnerable	2026-06-08 06:11:03.927142	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40593`	vulnerable	2026-06-08 06:11:03.926370	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40592`	vulnerable	2026-06-08 06:11:03.921009	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.