VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Dec 10, 2024· Updated Jun 17, 2026

CVE-2024-53246

CVE-2024-53246

Description

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, such as a Risky Commands Bypass, for successful exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Splunk/Splunk
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
    Range: >=9.1.0,<9.1.7
  • Splunk/Splunk Cloud Platform3 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: >=9.1.2312,<9.1.2312.206
    • (no CPE)range: <9.3.2408.101, <9.2.2406.106, <9.2.2403.111, <9.1.2312.206
    • (no CPE)range: 9.3.2408
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <9.3.2, <9.2.4, <9.1.7+ 1 more
    • (no CPE)range: <9.3.2, <9.2.4, <9.1.7
    • (no CPE)range: 9.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.