Approved changes feed: RSS · Atom

cpe:2.3:a:splunk:splunk_cloud_platform:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorSplunk (0f7ef08f-e3f5-59a4-ba5f-26afb7835b46)
ProductSplunk Cloud Platform (dbb7c55f-0604-5d18-8ed6-e749bb76ef03)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46213 vulnerable 2026-06-03 14:53:09.375980 Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
MEDIUM (4.8)
In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web browser.
Published: 2023-11-16T20:15:46.739Z
Updated: 2025-02-28T11:03:42.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22934 vulnerable 2026-06-03 14:49:20.588205 SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise
HIGH (7.3)
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands using a saved search job. The vulnerability requires an authenticated user to craft the saved job and a higher privileged user to initiate a request within their browser.
Published: 2023-02-14T17:22:35.427Z
Updated: 2025-02-28T11:03:58.707Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.