[{"vendor":"splunk","product":"splunk_enterprise","defaultStatus":"unknown","cpes":["cpe:2.3:a:splunk:splunk_enterprise:*:*:*:*:*:*:*:*"],"versions":[{"version":"9.2","lessThan":"9.2.3","versionType":"custom","status":"affected"},{"version":"9.1","lessThan":"9.1.6","versionType":"custom","status":"affected"}]},{"vendor":"splunk","product":"splunk_cloud_platform","defaultStatus":"unknown","cpes":["cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*"],"versions":[{"version":"9.2.2403","lessThan":"9.2.2403.108","versionType":"custom","status":"affected"},{"version":"9.1.2312","lessThan":"9.1.2312.205","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-10-15T17:29:56.360207Z","id":"CVE-2024-45741","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Splunk","product":"Splunk Enterprise","versions":[{"version":"9.2","lessThan":"9.2.3","versionType":"custom","status":"affected"},{"version":"9.1","lessThan":"9.1.6","versionType":"custom","status":"affected"}]},{"vendor":"Splunk","product":"Splunk Cloud Platform","versions":[{"version":"9.2.2403","lessThan":"9.2.2403.108","versionType":"custom","status":"affected"},{"version":"9.1.2312","lessThan":"9.1.2312.205","versionType":"custom","status":"affected"}]}]

NIST AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NIST CWE-79

OR
     *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 9.1.0 up to (excluding) 9.1.6
     *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 9.2.0 up to (excluding) 9.2.3
     *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions from (including) 9.1.2312 up to (excluding) 9.1.2312.205
     *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions from (including) 9.2.2403.100 up to (excluding) 9.2.2403.108

https://advisory.splunk.com/advisories/SVD-2024-1011 No Types Assigned

https://advisory.splunk.com/advisories/SVD-2024-1011 Vendor Advisory

https://research.splunk.com/application/d7b5aa71-157f-4359-9c34-e35752b1d0a2/ No Types Assigned

https://research.splunk.com/application/d7b5aa71-157f-4359-9c34-e35752b1d0a2/ Third Party Advisory

In Splunk Enterprise versions below 9.2.3 and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.108 and 9.1.2312.205, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create a malicious payload through a custom configuration file that the "api.uri" parameter from the "/manager/search/apps/local" endpoint in Splunk Web calls. This could result in execution of unauthorized JavaScript code in the browser of a user.

Splunk Inc. AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Splunk Inc. CWE-79

Splunk Inc. https://advisory.splunk.com/advisories/SVD-2024-1011 [No types assigned]

Splunk Inc. https://research.splunk.com/application/d7b5aa71-157f-4359-9c34-e35752b1d0a2/ [No types assigned]