CVE-2023-32712

🗓️ 01 Jun 2023 16:34:29Reported by SplunkType

In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject ANSI escape codes into log files, potentially leading to code execution. Universal Forwarder versions 9.1.0.1, 9.0.5, and 8.2.11, and lower may be vulnerable when management services are active and accessible over the network

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-32712	15 Jan 202517:55	–	circl
CNNVD	Splunk 安全漏洞	1 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-32712 Unauthenticated Log Injection in Splunk Enterprise	1 Jun 202316:34	–	cvelist
EUVD	EUVD-2023-36939	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Splunk	2 Jun 202300:00	–	ncsc
NVD	CVE-2023-32712	1 Jun 202317:15	–	nvd
Prion	Code injection	1 Jun 202317:15	–	prion
Positive Technologies	PT-2023-7355 · Splunk · Universal Forwarder +1	1 Jun 202300:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 8.1.0 < 8.1.14, 8.2.0 < 8.2.11, 9.0.0 < 9.0.5 (SVD-2023-0606)	1 Jun 202300:00	–	nessus
Vulnrichment	CVE-2023-32712 Unauthenticated Log Injection in Splunk Enterprise	1 Jun 202316:34	–	vulnrichment

NVD

Node

splunk splunkRange8.1.0–8.1.14enterprise

splunk splunkRange8.2.0–8.2.11enterprise

splunk splunkRange9.0.0–9.0.5enterprise

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "8.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "8.2.11.2"
      },
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.5.1"
      },
      {
        "version": "9.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.0.2"
      }
    ]
  },
  {
    "product": "Universal Forwarder",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "8.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "8.2.12"
      },
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.0.6"
      },
      {
        "version": "9.1",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.1.1"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2023-0606
research	www.research.splunk.com/application/de3908dc-1298-446d-84b9-fa81d37e959b

28 Feb 2025 11:03Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.13.1 - 8.6

EPSS0.00319

SSVC