Splunk security advisories, February 2023

Every Splunk security advisory published in February 2023, from Splunk Security Advisories (advisory.splunk.com) + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 13
Critical: 0
High: 5
In CISA KEV: 0
CVEs: 13

Splunk advisories published in February 2023

Feb 14, 2023
High [CVE-2023-22939] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command
High8.1
Feb 14, 2023
High [CVE-2023-22935] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter
High8.1
Feb 14, 2023
High [CVE-2023-22934] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command
High7.3
Feb 14, 2023
High [CVE-2023-22933] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View
High8.0
Feb 14, 2023
High [CVE-2023-22932] In Splunk Enterprise 9.0 versions before 9.0.4, a View
High8.7
Feb 14, 2023
Medium [CVE-2023-22943] In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to…
Medium4.8
Feb 14, 2023
Medium [CVE-2023-22942] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a cross-site request forgery in the Splunk Secure Gateway (SSG)…
Medium5.4
Feb 14, 2023
Medium [CVE-2023-22941] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field…
Medium6.5
Feb 14, 2023
Medium [CVE-2023-22940] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL)…
Medium6.3
Feb 14, 2023
Medium [CVE-2023-22938] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint
Medium4.3
Feb 14, 2023
Medium [CVE-2023-22937] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature
Medium4.3
Feb 14, 2023
Medium [CVE-2023-22936] In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search
Medium6.3
Feb 14, 2023
Medium [CVE-2023-22931] In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource…
Medium4.3

Get an email when Splunk publishes the next one.

See Splunk's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Splunk

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.