CVE-2024-23676

CVE-2024-23676 affects Splunk Enterprise: versions below 9.0.8 and 9.1.3 expose index metrics via the mrollup SPL command to low-privilege users, requiring interaction from a high-privileged user. The root cause is insufficient access control around mrollup, enabling sensitive metric disclosure. ...

CVE-2023-46213

CVE-2023-46213 affects Splunk Enterprise: versions prior to 9.0.7 and 9.1.2 are vulnerable due to ineffective escaping in the Show syntax Highlighted feature, enabling unauthorized code execution in a user’s browser (XSS). The vulnerability is documented across multiple sources (Splunk advisory S...