<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: splunk-cloud</title><description>Every new CVE for splunk-cloud.</description><link>https://agentprime.io/</link><item><title>CVE-2024-23676: Sensitive Information Disclosure of Index Metrics through “mrollup” SPL Command</title><link>https://agentprime.io/advisories/CVE-2024-23676/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-23676/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Jan 2024 20:37:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-23677: Server Response Disclosure in RapidDiag Salesforce.com Log File</title><link>https://agentprime.io/advisories/CVE-2024-23677/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-23677/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Jan 2024 20:37:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-23675: Splunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion</title><link>https://agentprime.io/advisories/CVE-2024-23675/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-23675/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Jan 2024 20:37:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-46213: Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page</title><link>https://agentprime.io/advisories/CVE-2023-46213/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46213/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Nov 2023 20:15:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-46214: Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing</title><link>https://agentprime.io/advisories/CVE-2023-46214/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46214/</guid><description>CVSS 8.0 (High). Critical: CVSS score 8.0 (7.0 or more) and EPSS 0.89 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Nov 2023 20:15:25 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-40597: Absolute Path Traversal in Splunk Enterprise Using runshellscript.py</title><link>https://agentprime.io/advisories/CVE-2023-40597/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40597/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Aug 2023 16:19:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40593: Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request</title><link>https://agentprime.io/advisories/CVE-2023-40593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40593/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Aug 2023 16:19:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40594: Denial of Service (DoS) via the ‘printf’ Search Function</title><link>https://agentprime.io/advisories/CVE-2023-40594/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40594/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Aug 2023 16:19:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40592: Reflected Cross-site Scripting (XSS) on &quot;/app/search/table&quot; web endpoint</title><link>https://agentprime.io/advisories/CVE-2023-40592/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40592/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Aug 2023 16:19:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40595: Remote Code Execution via Serialized Session Payload</title><link>https://agentprime.io/advisories/CVE-2023-40595/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40595/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Aug 2023 16:19:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-40598: Command Injection in Splunk Enterprise Using External Lookups</title><link>https://agentprime.io/advisories/CVE-2023-40598/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40598/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Aug 2023 16:19:28 GMT</pubDate><category>CVE</category></item></channel></rss>