CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-45740

In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through Scheduled Views that could result in execution of unauthorized JavaScript code in the browser of a user.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 3.6%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2024-45740

Splunk » Splunk » Version: 9.1.0

cpe:2.3:a:splunk:splunk:9.1.0
Splunk » Splunk » Version: 9.1.0.1

cpe:2.3:a:splunk:splunk:9.1.0.1
Splunk » Splunk » Version: 9.1.0.2

cpe:2.3:a:splunk:splunk:9.1.0.2
Splunk » Splunk » Version: 9.1.1

cpe:2.3:a:splunk:splunk:9.1.1
Splunk » Splunk » Version: 9.1.2

cpe:2.3:a:splunk:splunk:9.1.2
Splunk » Splunk » Version: 9.1.3

cpe:2.3:a:splunk:splunk:9.1.3
Splunk » Splunk » Version: 9.1.4

cpe:2.3:a:splunk:splunk:9.1.4
Splunk » Splunk » Version: 9.1.5

cpe:2.3:a:splunk:splunk:9.1.5
Splunk » Splunk » Version: 9.2.0

cpe:2.3:a:splunk:splunk:9.2.0
Splunk » Splunk » Version: 9.2.1

cpe:2.3:a:splunk:splunk:9.2.1
Splunk » Splunk » Version: 9.2.2

cpe:2.3:a:splunk:splunk:9.2.2
Splunk » Splunk Cloud Platform » Version: N/A

cpe:2.3:a:splunk:splunk_cloud_platform:-
Splunk » Splunk Cloud Platform » Version: 8.1.2103

cpe:2.3:a:splunk:splunk_cloud_platform:8.1.2103
Splunk » Splunk Cloud Platform » Version: 8.2.2105

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2105
Splunk » Splunk Cloud Platform » Version: 8.2.2106

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2106
Splunk » Splunk Cloud Platform » Version: 8.2.2107

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2107
Splunk » Splunk Cloud Platform » Version: 8.2.2109

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2109
Splunk » Splunk Cloud Platform » Version: 8.2.2111

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2111
Splunk » Splunk Cloud Platform » Version: 8.2.2112

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2112
Splunk » Splunk Cloud Platform » Version: 8.2.2201

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2201
Splunk » Splunk Cloud Platform » Version: 8.2.2202

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2202
Splunk » Splunk Cloud Platform » Version: 8.2.2203

cpe:2.3:a:splunk:splunk_cloud_platform:8.2.2203
Splunk » Splunk Cloud Platform » Version: 9.0.2209

cpe:2.3:a:splunk:splunk_cloud_platform:9.0.2209
Splunk » Splunk Cloud Platform » Version: 9.0.2209.3

cpe:2.3:a:splunk:splunk_cloud_platform:9.0.2209.3
Splunk » Splunk Cloud Platform » Version: 9.0.2305.100

cpe:2.3:a:splunk:splunk_cloud_platform:9.0.2305.100
Splunk » Splunk Cloud Platform » Version: 9.0.2305.200

cpe:2.3:a:splunk:splunk_cloud_platform:9.0.2305.200
Splunk » Splunk Cloud Platform » Version: 9.1.2308

cpe:2.3:a:splunk:splunk_cloud_platform:9.1.2308
Splunk » Splunk Cloud Platform » Version: 9.1.2308.207

cpe:2.3:a:splunk:splunk_cloud_platform:9.1.2308.207
Splunk » Splunk Cloud Platform » Version: 9.1.2312

cpe:2.3:a:splunk:splunk_cloud_platform:9.1.2312
Splunk » Splunk Cloud Platform » Version: 9.1.2312.100

cpe:2.3:a:splunk:splunk_cloud_platform:9.1.2312.100
Splunk » Splunk Cloud Platform » Version: 9.1.2312.108

cpe:2.3:a:splunk:splunk_cloud_platform:9.1.2312.108
Splunk » Splunk Cloud Platform » Version: 9.1.2312.109

cpe:2.3:a:splunk:splunk_cloud_platform:9.1.2312.109
Splunk » Splunk Cloud Platform » Version: 9.1.2312.206

cpe:2.3:a:splunk:splunk_cloud_platform:9.1.2312.206
Splunk » Splunk Cloud Platform » Version: 9.2.2403

cpe:2.3:a:splunk:splunk_cloud_platform:9.2.2403

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-45740

Products

Pricing

Contact Us