← Back

CVE-2023-32716

nvd nist
Published: Jun 1, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the {{dump}} SPL command to cause a denial of service by crashing the Splunk daemon.

Affected (4)

Splunk
2 products
Splunk
Splunk Cloud Platform
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Splunk
Splunk
From 8.1.0 to 8.1.14
Splunk
From 8.2.0 to 8.2.11
Splunk
From 9.0.0 to 9.0.5
Splunk Cloud Platform
Before 9.0.2303.100

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (4)

Source: prodsec@splunk.com
Vendor Advisory
Source: prodsec@splunk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.