CVE Catalog
CVE-2023-40594
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.36%
27th percentile - higher than 27% of all known CVEs
Summary
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against the Splunk Enterprise instance.
Risk Assessment
A DoS attack can lead to service unavailability of Splunk, affecting the organization's operational continuity and potentially resulting in data loss.
Recommendation
It is recommended to upgrade to versions 8.2.12, 9.0.6, or 9.1.1 to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can use the `printf` SPL function to perform a denial of service (DoS) against the Splunk Enterprise instance.