Security Advisory

CVE-2024-36984

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-01 16:30:44
Last updated 2025-02-28 11:03:53
Assigner Splunk
State PUBLISHED

Description

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then use to serialize untrusted data. The attacker could use the query to execute arbitrary code.