VDB
GCVE-VVD-NCSC-2024-276
GCVE-VVD-NCSC-2024-276
Advisory PublishedCVSS 7.5/10
De ontwikkelaars van Splunk hebben kwetsbaarheden verholpen in Splunk en Splunk Enterprise.
Weaknesses (CWE)
CWE-476NULL Pointer DereferenceCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-502Deserialization of Untrusted DataCWE-687Function Call With Incorrectly Specified Argument ValueCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-434Unrestricted Upload of File with Dangerous TypeCWE-284Improper Access ControlCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')CWE-35Path Traversal: '.../...//'CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-862Missing AuthorizationCWE-204Observable Response Discrepancy
Risk Scores
CVSS 3.1
7.5/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| splunk | splunk_enterprise | — | — |
| splunk | splunk | — | — |
| splunk | splunk_cloud_platform | — | — |
Aliases
CVE-2024-36990CVE-2024-36987CVE-2024-36997CVE-2024-36986CVE-2024-36993CVE-2024-36984CVE-2024-36995CVE-2024-36992CVE-2024-36996CVE-2024-36982CVE-2024-36985CVE-2024-36983CVE-2024-36991CVE-2024-36994CVE-2024-36989
Transitive aliases
CNVD-2024-34270EUVD-2024-36381GHSA-32hm-m24x-pwrgVVD-CISA-2024-36993BDU:2024-11668EUVD-2024-36370BDU:2024-05274GHSA-62xc-vffq-mcggBDU:2024-05269CNVD-2024-34272CNVD-2024-34273EUVD-2024-36375EUVD-2024-36380EUVD-2024-36384BDU:2024-07963CNVD-2024-34266EUVD-2024-36379GHSA-m336-g88r-274qEUVD-2024-36374VVD-CISA-2024-36986VVD-CISA-2024-36996GHSA-q9mv-48mg-vv6wVVD-CISA-2024-36991GHSA-fg59-j242-rcj9BDU:2024-05109CNVD-2024-34263CNVD-2024-34268CNVD-2024-34274VVD-CISA-2024-36995GHSA-jgc6-c9v8-vfqwVVD-CISA-2024-36994EUVD-2024-36382VVD-CISA-2024-36997EUVD-2024-36373BDU:2024-05271VVD-CISA-2024-36982EUVD-2024-36383EUVD-2024-36376CNVD-2024-34265GHSA-gw8p-7jqv-5v6xGHSA-6m8w-jqvr-3jhhEUVD-2024-36378CNVD-2024-34264EUVD-2024-36372CNVD-2024-34267VVD-CISA-2024-36987GHSA-54hj-cc7x-rq4cVVD-CISA-2024-36984VVD-CISA-2024-36990CNVD-2024-34269GHSA-qmqh-r82r-6q87BDU:2024-05272BDU:2024-09744GHSA-2m84-pxgc-c9vwGHSA-536f-3wcm-q222VVD-CISA-2024-36983CNVD-2024-34261EUVD-2024-36377EUVD-2024-36371GHSA-x3vh-gwhf-vr8wVVD-CISA-2024-36985CNVD-2024-34262GHSA-xgxh-897r-pw22GHSA-mcvg-m5cf-cpwhCNVD-2024-34271BDU:2024-05270VVD-CISA-2024-36989VVD-CISA-2024-36992BDU:2024-05273
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.