Splunk Enterprise Security (Es)
Approved changes feed: RSS · Atom
cpe:2.3:a:splunk:splunk_enterprise_security_(es):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Splunk (0f7ef08f-e3f5-59a4-ba5f-26afb7835b46) |
|---|---|
| Product | Splunk Enterprise Security (Es) (eaf1aeb6-fccd-52bd-adbf-e5fa2aa8a74d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22165 |
vulnerable | 2026-06-03 14:54:59.911417 |
Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation
MEDIUM (6.5)
In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.<br>The vulnerability requires an authenticated session and access to create an Investigation. It only affects the availability of the Investigations manager, but without the manager, the Investigations functionality becomes unusable for most users.
Published: 2024-01-09T17:01:04.884Z
Updated: 2025-02-28T11:03:43.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22164 |
vulnerable | 2026-06-03 14:54:59.909655 |
Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments
MEDIUM (4.3)
In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.
Published: 2024-01-09T17:01:07.832Z
Updated: 2025-06-03T14:31:04.696Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.