CVE-2024-22164 Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments

In Splunk Enterprise Security ES versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service DoS to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessib...

CVE-2024-22164

CVE-2024-22164 affects Splunk Enterprise Security (ES) prior to version 7.1.2. The vulnerability is triggered via the investigation attachments endpoint, where insufficient request size limiting can cause a denial of service (DoS) that makes an Investigation inaccessible. Affected component is th...

CVE-2024-22164 Denial of Service of an Investigation in Splunk Enterprise Security through Investigation attachments

In Splunk Enterprise Security ES versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service DoS to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessib...

CVE-2024-22165 Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation

In Splunk Enterprise Security ES versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service DoS. The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.The vulnerability requires an...

CVE-2024-22165 Denial of Service in Splunk Enterprise Security of the Investigations manager through Investigation creation

In Splunk Enterprise Security ES versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service DoS. The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.The vulnerability requires an...

CVE-2024-22165

Affected product: Splunk Enterprise Security (ES)

PT-2024-19253 · Splunk · Splunk Enterprise Security

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise Security ES versions prior to 7.1.2 Description: The issue allows an attacker to create a malformed Investigation, leading to a denial of service DoS that prevents the generation and rendering of the Investigations manager...

Splunk Security Breach

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

PT-2024-19252 · Splunk · Splunk Enterprise Security

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise Security ES versions prior to 7.1.2 Description: The issue allows an attacker to perform a denial of service DoS to the Investigation by using investigation attachments. This is possible because the attachment endpoint does...

Splunk Security Breach

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Security Bulletin: Vulnerability in Enterprise Security API for Java affects IBM Process Mining - X-Force ID 270419

Summary There is a vulnerability in Enterprise Security API for Java that could allow a remote attacker to exploit this vulnerability and cause a denial of service condition.. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability...

Qlik Sense Enterprise Installed (Windows)

Binary data qliksenseenterprisewininstalled.nbin...

Trellix Enterprise Security Manager < 11.6.7 Command Injection

The version of Trellix Enterprise Security Manager running on the remote web server is prior to 11.6.7. It is, therefore, affected by multiple command injection vulnerabilities. - A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip files. Incomplete...

Trellix Enterprise Security Manager Command Injection Vulnerability

Trellix Enterprise Security Manager is an application from American FireEye Trellix, Inc. for real-time monitoring and analysis enables you to quickly prioritize, investigate and respond to hidden threats. A security vulnerability exists in Trellix Enterprise Security Manager ESM versions prior t...

Trellix Enterprise Security Manager < 11.6.9 Command Injection

The version of Trellix Enterprise Security Manager running on the remote web server is prior to 11.6.9. It is, therefore, affected by a command injection vulnerability. Due to improper neutralization of special elements, a remote attacker, authenticated as an administrator, can execute code as...

CVE-2023-6070

A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality where the API accepts uploaded content and doesn...

Trellix Enterprise Security Manager Code Issue Vulnerability

Trellix Enterprise Security Manager is an application from American FireEye Trellix, Inc. for real-time monitoring and analysis enables you to quickly prioritize, investigate and respond to hidden threats. A code issue vulnerability exists in Trellix Enterprise Security Manager versions prior to...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.325.5.el7 - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext Krister Johansen Orabug: 35905508 - char: misc: Increase the maximum number of dynamic misc devices to 1048448 D Scott Phillips Orabug: 35905508 - perf/arm-cmn: Fix invalid pointer when access...

SUSE: Security Advisory (SUSE-SU-2023:4434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unbreakable Enterprise kernel security update

5.4.17-2136.324.5.3 - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' Sherry Yang Orabug: 35896102 5.4.17-2136.324.5.2 - fix breakage in dormdir Al Viro Orabug: 35885837 5.4.17-2136.324.5.1 - x86: KVM: SVM: always update the x2avic msr interception Maxim...