CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-32706

On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted messages to the XML parser within SAML authentication to cause a denial of service in the Splunk daemon.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.5%

CVSS Severity

CVSS v3 Score 7.7

References

Products affected by CVE-2023-32706

Splunk » Splunk » Version: 8.1.0

cpe:2.3:a:splunk:splunk:8.1.0
Splunk » Splunk » Version: 8.1.1

cpe:2.3:a:splunk:splunk:8.1.1
Splunk » Splunk » Version: 8.1.12

cpe:2.3:a:splunk:splunk:8.1.12
Splunk » Splunk » Version: 8.1.13

cpe:2.3:a:splunk:splunk:8.1.13
Splunk » Splunk » Version: 8.1.2

cpe:2.3:a:splunk:splunk:8.1.2
Splunk » Splunk » Version: 8.1.4

cpe:2.3:a:splunk:splunk:8.1.4
Splunk » Splunk » Version: 8.1.5

cpe:2.3:a:splunk:splunk:8.1.5
Splunk » Splunk » Version: 8.1.6

cpe:2.3:a:splunk:splunk:8.1.6
Splunk » Splunk » Version: 8.1.7

cpe:2.3:a:splunk:splunk:8.1.7
Splunk » Splunk » Version: 8.2.0

cpe:2.3:a:splunk:splunk:8.2.0
Splunk » Splunk » Version: 8.2.10

cpe:2.3:a:splunk:splunk:8.2.10
Splunk » Splunk » Version: 8.2.9

cpe:2.3:a:splunk:splunk:8.2.9
Splunk » Splunk » Version: 9.0.0

cpe:2.3:a:splunk:splunk:9.0.0
Splunk » Splunk » Version: 9.0.3

cpe:2.3:a:splunk:splunk:9.0.3
Splunk » Splunk » Version: 9.0.4

cpe:2.3:a:splunk:splunk:9.0.4
Splunk » Splunk Cloud Platform » Version: N/A

cpe:2.3:a:splunk:splunk_cloud_platform:-
Splunk » Splunk Cloud Platform » Version: 8.1.2103

cpe:2.3:a:splunk:splunk_cloud_platform:8.1.2103
Splunk » Splunk Cloud Platform » Version: 8.2.2105

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2105
Splunk » Splunk Cloud Platform » Version: 8.2.2106

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2106
Splunk » Splunk Cloud Platform » Version: 8.2.2107

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2107
Splunk » Splunk Cloud Platform » Version: 8.2.2109

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2109
Splunk » Splunk Cloud Platform » Version: 8.2.2111

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2111
Splunk » Splunk Cloud Platform » Version: 8.2.2112

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2112
Splunk » Splunk Cloud Platform » Version: 8.2.2201

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2201
Splunk » Splunk Cloud Platform » Version: 8.2.2202

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2202
Splunk » Splunk Cloud Platform » Version: 8.2.2203

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2203
Splunk » Splunk Cloud Platform » Version: 9.0.2209

cpe:2.3:a:splunk:splunk_cloud_platform:9.0.2209
Splunk » Splunk Cloud Platform » Version: 9.0.2209.3

cpe:2.3:a:splunk:splunk_cloud_platform:9.0.2209.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-32706

Products

Pricing

Contact Us