VYPR
← All advisories
High severity8.6NVD Advisory· Published Jul 31, 2023· Updated Jun 17, 2026

CVE-2023-3997

CVE-2023-3997

Description

Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisoning. When a terminal user attempts to view the poisoned logs, this can tamper with the terminal and cause possible malicious code execution from the terminal user’s action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Splunk/SOAR3 versions
    cpe:2.3:a:splunk:soar:*:*:*:*:cloud:*:*:*+ 2 more
    • cpe:2.3:a:splunk:soar:*:*:*:*:cloud:*:*:*range: <6.1.0.131
    • cpe:2.3:a:splunk:soar:*:*:*:*:on-premises:*:*:*range: <6.1.0
    • (no CPE)range: <6.1.0
  • Splunk/Splunk SOAR (Cloud)v5
    Range: -
  • Splunk/Splunk SOAR (On-premises)v5
    Range: -

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.