CVE-2024-36991

No fix known EPSS 13%CVSS 7.5

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.

Published 2024-07-01 · CVE record · OSV

Products: Splunk Enterprise, splunk