2026年8月20日星期四

Splunk Products Multiple Vulnerabilities

Splunk Products Multiple Vulnerabilities

Release Date: 20 Aug 2026

Multiple vulnerabilities were identified in Splunk products. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting, denial of service condition, elevation of privilege, security restriction bypass, sensitive information disclosure and remote code execution on the targeted system.

Impact

  • Remote Code Execution
  • Denial of Service
  • Information Disclosure
  • Elevation of Privilege
  • Security Restriction Bypass
  • Cross-Site Scripting

System / Technologies affected

  • Splunk Enterprise 9.4 versions 9.4.0 to 9.4.13
  • Splunk Enterprise 10.0 versions 10.0.0 to 10.0.8
  • Splunk Enterprise 10.2 versions 10.2.0 to 10.2.5
  • Splunk Enterprise 10.4 versions 10.4.0 to 10.4.1

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Related Link

於

沒有留言:

發佈留言

訂閱： 發佈留言 (Atom)

Splunk 產品多個漏洞

Splunk 產品多個漏洞 發佈日期: 2026年08月20日 於 Splunk 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發跨網站指令碼、阻斷服務狀況、權限提升、繞過保安限制、敏感資料洩露及遠端執行任意程式碼。 影響 遠端執行程式碼 阻斷服務 資料洩露 權限提升 ...