296,147
Total vulnerabilities in the database
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a user who holds a role that contains the high-privilege capability edit_scripted and list_inputs capability , could perform a remote command execution due to improper user input sanitization on the scripted input files.<br><br>See Define roles on the Splunk platform with capabilities and Setting up a scripted input for more information.
| Software | From | Fixed in |
|---|---|---|
| splunk / splunk | 9.1.0 | 9.1.10 |
| splunk / splunk | 9.2.0 | 9.2.7 |
| splunk / splunk | 9.3.0 | 9.3.5 |
| splunk / splunk | 9.4.0 | 9.4.3 |