Splunk security advisories, August 2023

Every Splunk security advisory published in August 2023, from Splunk Security Advisories (advisory.splunk.com) + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 8
Critical: 0
High: 6
In CISA KEV: 0
CVEs: 8

Splunk advisories published in August 2023

Aug 30, 2023
High [CVE-2023-4571] In Splunk IT Service Intelligence (ITSI) versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor
High8.6
Aug 30, 2023
High [CVE-2023-40598] In Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1, an attacker
High8.5
Aug 30, 2023
High [CVE-2023-40597] In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker
High7.8
Aug 30, 2023
High [CVE-2023-40596] In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk…
High7.0
Aug 30, 2023
High [CVE-2023-40595] In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they
High8.8
Aug 30, 2023
High [CVE-2023-40592] In Splunk Enterprise versions below 9.1.1, 9.0.6, and 8.2.12, an attacker can craft a special web request that can
High8.4
Aug 30, 2023
Medium [CVE-2023-40594] In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker
Medium6.5
Aug 30, 2023
Medium [CVE-2023-40593] In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor
Medium6.3

Get an email when Splunk publishes the next one.

See Splunk's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Splunk

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.