NetSight
medium6.5

CVE-2023-40594

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against t…

Impact

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against the Splunk Enterprise instance.

Affected products

VendorProductAffected versions
SplunkSplunk
from 8.2.0 before 8.2.12
from 9.0.0 before 9.0.6
Version 9.1.0
SplunkSplunk Cloud Platform
through 9.0.2305.100

Weakness classification

References