CVE-2024-36993— 部分Splunk产品 安全漏洞
Possible ATT&CK Techniques 1AI
T1059.001 · PowerShell新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-36993の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Persistent Cross-site Scripting (XSS) in Web Bulletin
ソース: CVE Program / CVE List V5
脆弱性説明
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a Splunk Web Bulletin Messages that could result in execution of unauthorized JavaScript code in the browser of a user.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
ソース: CVE Program / CVE List V5
脆弱性タイトル
部分Splunk产品 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Splunk是美国Splunk公司的一套数据收集分析软件。该软件主要用于收集、索引和分析及其所产生的数据，包括所有IT系统和基础结构（物理、虚拟机和云）生成的数据。 部分Splunk产品存在安全漏洞。攻击者利用该漏洞可以在用户的浏览器中执行未经授权的 JavaScript 代码。以下产品及版本受到影响：Splunk Enterprise 9.2.2之前版本、9.1.5之前版本、9.0.10之前版本、Splunk Cloud Platform 9.1.2312.200之前版本、9.1.2308.207之前版
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Splunk | Splunk Enterprise | 9.2 ~ 9.2.2 | - | |
| Splunk | Splunk Cloud Platform | 9.1.2312 ~ 9.1.2312.200 | - |
II. CVE-2024-36993の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-36993のインテリジェンス情報
请登录查看更多情报信息。
CVE-2024-36993 其他参考 (2)
Same Patch Batch · Splunk · 2024-07-01 · 15 CVEs total
| CVE-2024-36984 | 8.8 HIGH | Remote Code Execution through Serialized Session Payload in Splunk Enterprise on Windows |
| CVE-2024-36985 | 8.8 HIGH | Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in t |
| CVE-2024-36983 | 8.0 HIGH | Command Injection using External Lookups |
| CVE-2024-36991 | 7.5 HIGH | Path Traversal on the “/modules/messaging/“ endpoint in Splunk Enterprise on Windows |
| CVE-2024-36982 | 7.5 HIGH | Denial of Service through null pointer reference in “cluster/config” REST endpoint |
| CVE-2024-36989 | 6.5 MEDIUM | Low-privileged user could create notifications in Splunk Web Bulletin Messages |
| CVE-2024-36990 | 6.5 MEDIUM | Denial of Service (DoS) on the datamodel/web REST endpoint |
| CVE-2024-36986 | 6.3 MEDIUM | Risky command safeguards bypass through Search ID query in Analytics Workspace |
| CVE-2024-36994 | 5.4 MEDIUM | Persistent Cross-site Scripting (XSS) in Dashboard Elements |
| CVE-2024-36992 | 5.4 MEDIUM | Persistent Cross-site Scripting (XSS) in Dashboard Elements |
| CVE-2024-36996 | 5.3 MEDIUM | Information Disclosure of user names |
| CVE-2024-36997 | 4.6 MEDIUM | Persistent Cross-site Scripting (XSS) in conf-web/settings REST endpoint |
| CVE-2024-36987 | 4.3 MEDIUM | Insecure File Upload in the indexing/preview REST endpoint |
| CVE-2024-36995 | 4.3 MEDIUM | Low-privileged user could create experimental items |
IV. 関連脆弱性
同じ製品: Splunk Enterprise
- CVE-2026-20298
Sensitive Information Disclosure through the storage/passwor - CVE-2026-20296
SPL Command Safeguards Bypass through Cross-Site Request For - CVE-2026-20297
Path Traversal through 'explicit_appname' in the App Install - CVE-2026-20258
Stored Cross-Site Scripting (XSS) through Classic Dashboard - CVE-2026-20253
Unauthenticated Arbitrary File Creation and Truncation in a
同じベンダー: Splunk
- CVE-2026-20298
Sensitive Information Disclosure through the storage/passwor - CVE-2026-20296
SPL Command Safeguards Bypass through Cross-Site Request For - CVE-2026-20297
Path Traversal through 'explicit_appname' in the App Install - CVE-2026-20266
OS Command Injection in the btool Configuration Helper in Sp - CVE-2026-20265
Insecure Default Domain Allowlist in Splunk AI Toolkit
同じ弱点: CWE-79
- CVE-2026-15425
Yoast SEO <= 28.0 - Authenticated (Author+) Stored Cross-Sit - CVE-2026-57531
Milkdown < 7.21.3 DOM XSS via innerHTML Assignment - CVE-2026-57530
Milkdown < 7.21.3 Stored XSS via javascript: URL in link hre - CVE-2026-8308
Reflected XSS Polen Media's Website Template - CVE-2026-55730
Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802
V. CVE-2024-36993へのコメント
まだコメントはありません