GCVE-110-NCSC-2024-276

Advisory PublishedCVSS 7.5/10

Vulnetix · Advisory published July 2, 2024

De ontwikkelaars van Splunk hebben kwetsbaarheden verholpen in Splunk en Splunk Enterprise.

Weaknesses (CWE)

CWE-476NULL Pointer DereferenceCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-502Deserialization of Untrusted DataCWE-687Function Call With Incorrectly Specified Argument ValueCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-434Unrestricted Upload of File with Dangerous TypeCWE-284Improper Access ControlCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-35Path Traversal: '.../...//'CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-862Missing AuthorizationCWE-204Observable Response Discrepancy

Risk Scores

CVSS 3.1

7.5/10

High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
splunk	splunk_enterprise	—	—
splunk	splunk	—	—
splunk	splunk_cloud_platform	—	—

Aliases

CVE-2024-36982 CVE-2024-36983 CVE-2024-36984 CVE-2024-36985 CVE-2024-36986 CVE-2024-36987 CVE-2024-36989 CVE-2024-36990 CVE-2024-36991 CVE-2024-36992 CVE-2024-36993 CVE-2024-36994 CVE-2024-36995 CVE-2024-36996 CVE-2024-36997

References

advisory

Browse GCVE Records

74,352 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON