VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 14, 2023· Updated Jun 17, 2026

CVE-2023-22938

CVE-2023-22938

Description

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Splunk/Splunk
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
    Range: >=8.1.0,<8.1.13
  • Splunk/Splunk Cloud Platform2 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: <9.0.2209.3
    • (no CPE)range: -
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <8.1.13, <8.2.10, <9.0.4+ 1 more
    • (no CPE)range: <8.1.13, <8.2.10, <9.0.4
    • (no CPE)range: 8.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.