60
CVE-2024-36991
—1CVSS 3.1
7.5 high
EPSS
13%p96
Published
()
Modified
Description
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.
- Vendors
- splunk
- Products
- splunk
- Weakness
- CWE-35, CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N