VYPR
← All advisories
High severity8.0NVD Advisory· Published Jul 1, 2024· Updated Jun 17, 2026

CVE-2024-36983

CVE-2024-36983

Description

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9.1.2308.207, an authenticated user could create an external lookup that calls a legacy internal function. The authenticated user could use this internal function to insert code into the Splunk platform installation directory. From there, the user could execute arbitrary code on the Splunk platform Instance.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Splunk/Splunk
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
    Range: >=9.0.0,<9.0.10
  • Splunk/Splunk Cloud Platform3 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: >=9.1.2308,<9.1.2308.207
    • (no CPE)range: <9.1.2312.109, <9.1.2308.207
    • (no CPE)range: 9.1.2312
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <9.2.2, <9.1.5, <9.0.10+ 1 more
    • (no CPE)range: <9.2.2, <9.1.5, <9.0.10
    • (no CPE)range: 9.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.