Vulnerability-Lookup

WID-SEC-W-2023-2229

Vulnerability from csaf_certbund - Published: 2023-08-30 22:00 - Updated: 2024-08-12 22:00

Summary

Splunk Splunk Enterprise: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.

Angriff: Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand zu verursachen, seine Privilegien zu erweitern und weitere, nicht spezifizierte Auswirkungen zu verursachen.

Betroffene Betriebssysteme: - Linux - MacOS X - Windows

CVE-2013-7489

Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuführen.

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2018-10237

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2018-20225

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2019-20454

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2019-20838

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-14155

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-28469

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-28851

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-29652

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8169

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8177

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8231

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8284

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8285

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8286

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2020-8908

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-20066

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22569

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22876

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22890

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22897

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22898

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22901

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22922

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22923

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22924

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22925

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22926

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22945

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22946

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-22947

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-23343

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-23382

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-27918

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-27919

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-29060

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-29425

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-29923

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-31525

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-31566

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-33194

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-33195

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-33196

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-33197

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-33198

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-34558

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-3520

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-3572

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-36221

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-36976

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-3803

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-38297

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-38561

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-39293

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-41182

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-41183

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-41184

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-41771

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-41772

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-43565

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-44716

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2021-44717

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-1705

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-1941

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-1962

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-22576

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-2309

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-23491

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-23772

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-23773

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-23806

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-24675

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-24921

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-24999

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-25881

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27191

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27536

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27664

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27774

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27775

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27776

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27778

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27779

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27780

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27781

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-27782

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-28131

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-28327

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-2879

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-2880

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-29526

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-29804

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30115

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30580

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30629

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30630

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30631

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30632

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30633

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30634

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-30635

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-31129

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-3171

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32148

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32149

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32189

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32205

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32206

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32207

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32208

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-32221

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-33987

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-3509

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-3510

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-3517

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-35252

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-35260

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-35737

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-36227

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-37599

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-37601

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-37603

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-38900

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-40023

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-40897

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-40899

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-41715

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-41716

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-41720

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-41722

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-42003

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-42004

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-42915

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-42916

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-43551

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-43552

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2022-46175

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-23914

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-23915

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-23916

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-24539

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-24540

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-27533

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-27534

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-27535

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-27536

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-27537

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-27538

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-29400

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-29402

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-29403

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-29404

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-29405

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-40592

Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion 'printf', u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgemäßen Signaturvalidierung, einer unsachgemäßen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand zu verursachen und seine Privilegien zu erweitern.

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-40593

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-40594

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-40595

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-40596

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-40597

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

CVE-2023-40598

Affected products

Known affected 6 products

Product	Identifier	Version
Splunk Splunk Enterprise <9.0.9 Splunk / Splunk Enterprise		<9.0.9
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Splunk Splunk Enterprise Splunk / Splunk Enterprise	`cpe:/a:splunk:splunk:-`	—
Splunk Splunk Enterprise <9.1.4 Splunk / Splunk Enterprise		<9.1.4
Splunk Splunk Enterprise <9.2.1 Splunk / Splunk Enterprise		<9.2.1
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—

References

14 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://advisory.splunk.com//advisories/SVD-2023-0801	external
https://advisory.splunk.com//advisories/SVD-2023-0802	external
https://advisory.splunk.com//advisories/SVD-2023-0803	external
https://advisory.splunk.com//advisories/SVD-2023-0804	external
https://advisory.splunk.com//advisories/SVD-2023-0805	external
https://advisory.splunk.com//advisories/SVD-2023-0806	external
https://advisory.splunk.com//advisories/SVD-2023-0807	external
https://advisory.splunk.com//advisories/SVD-2023-0808	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://linux.oracle.com/errata/ELSA-2024-2988.html	external
https://advisory.splunk.com/advisories/SVD-2024-0718	external
https://advisory.splunk.com//advisories/SVD-2024-0801	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Splunk Enterprise erm\u00f6glicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen, seine Privilegien zu erweitern und weitere, nicht spezifizierte Auswirkungen zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-2229 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2229.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-2229 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2229"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0801"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0802"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0803"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0804"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0805"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0806"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0807"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory vom 2023-08-30",
        "url": "https://advisory.splunk.com//advisories/SVD-2023-0808"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2024:0196-1 vom 2024-01-23",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-January/017743.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2024-2988 vom 2024-05-28",
        "url": "https://linux.oracle.com/errata/ELSA-2024-2988.html"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory SVD-2024-0718 vom 2024-07-02",
        "url": "https://advisory.splunk.com/advisories/SVD-2024-0718"
      },
      {
        "category": "external",
        "summary": "Splunk Security Advisory SVD-2024-0801 vom 2024-08-12",
        "url": "https://advisory.splunk.com//advisories/SVD-2024-0801"
      }
    ],
    "source_lang": "en-US",
    "title": "Splunk Splunk Enterprise: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-08-12T22:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:57:53.670+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2023-2229",
      "initial_release_date": "2023-08-30T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-08-30T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-01-23T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2024-05-28T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2024-07-01T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Splunk-SVD aufgenommen"
        },
        {
          "date": "2024-08-12T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Splunk-SVD aufgenommen"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Splunk Splunk Enterprise",
                "product": {
                  "name": "Splunk Splunk Enterprise",
                  "product_id": "T008911",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:splunk:splunk:-"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.1.1",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.1.1",
                  "product_id": "T029634"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.0.6",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.0.6",
                  "product_id": "T029635"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.2.12",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c8.2.12",
                  "product_id": "T029636"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.2.1",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.2.1",
                  "product_id": "T033705"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.1.4",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.1.4",
                  "product_id": "T033718"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c9.0.9",
                "product": {
                  "name": "Splunk Splunk Enterprise \u003c9.0.9",
                  "product_id": "T033720"
                }
              }
            ],
            "category": "product_name",
            "name": "Splunk Enterprise"
          }
        ],
        "category": "vendor",
        "name": "Splunk"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2013-7489",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2013-7489"
    },
    {
      "cve": "CVE-2018-10237",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2018-10237"
    },
    {
      "cve": "CVE-2018-20225",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2018-20225"
    },
    {
      "cve": "CVE-2019-20454",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2019-20454"
    },
    {
      "cve": "CVE-2019-20838",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2019-20838"
    },
    {
      "cve": "CVE-2020-14155",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-14155"
    },
    {
      "cve": "CVE-2020-28469",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-28469"
    },
    {
      "cve": "CVE-2020-28851",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-28851"
    },
    {
      "cve": "CVE-2020-29652",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-29652"
    },
    {
      "cve": "CVE-2020-8169",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-8169"
    },
    {
      "cve": "CVE-2020-8177",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-8177"
    },
    {
      "cve": "CVE-2020-8231",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-8231"
    },
    {
      "cve": "CVE-2020-8284",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-8284"
    },
    {
      "cve": "CVE-2020-8285",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-8285"
    },
    {
      "cve": "CVE-2020-8286",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-8286"
    },
    {
      "cve": "CVE-2020-8908",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2020-8908"
    },
    {
      "cve": "CVE-2021-20066",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-20066"
    },
    {
      "cve": "CVE-2021-22569",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22569"
    },
    {
      "cve": "CVE-2021-22876",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22876"
    },
    {
      "cve": "CVE-2021-22890",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22890"
    },
    {
      "cve": "CVE-2021-22897",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22897"
    },
    {
      "cve": "CVE-2021-22898",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22898"
    },
    {
      "cve": "CVE-2021-22901",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22901"
    },
    {
      "cve": "CVE-2021-22922",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22922"
    },
    {
      "cve": "CVE-2021-22923",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22923"
    },
    {
      "cve": "CVE-2021-22924",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22924"
    },
    {
      "cve": "CVE-2021-22925",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22925"
    },
    {
      "cve": "CVE-2021-22926",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22926"
    },
    {
      "cve": "CVE-2021-22945",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22945"
    },
    {
      "cve": "CVE-2021-22946",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22946"
    },
    {
      "cve": "CVE-2021-22947",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-22947"
    },
    {
      "cve": "CVE-2021-23343",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-23343"
    },
    {
      "cve": "CVE-2021-23382",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-23382"
    },
    {
      "cve": "CVE-2021-27918",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-27918"
    },
    {
      "cve": "CVE-2021-27919",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-27919"
    },
    {
      "cve": "CVE-2021-29060",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-29060"
    },
    {
      "cve": "CVE-2021-29425",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-29425"
    },
    {
      "cve": "CVE-2021-29923",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-29923"
    },
    {
      "cve": "CVE-2021-31525",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-31525"
    },
    {
      "cve": "CVE-2021-31566",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-31566"
    },
    {
      "cve": "CVE-2021-33194",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-33194"
    },
    {
      "cve": "CVE-2021-33195",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-33195"
    },
    {
      "cve": "CVE-2021-33196",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-33196"
    },
    {
      "cve": "CVE-2021-33197",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-33197"
    },
    {
      "cve": "CVE-2021-33198",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-33198"
    },
    {
      "cve": "CVE-2021-34558",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-34558"
    },
    {
      "cve": "CVE-2021-3520",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-3520"
    },
    {
      "cve": "CVE-2021-3572",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-3572"
    },
    {
      "cve": "CVE-2021-36221",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-36221"
    },
    {
      "cve": "CVE-2021-36976",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-36976"
    },
    {
      "cve": "CVE-2021-3803",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-3803"
    },
    {
      "cve": "CVE-2021-38297",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-38297"
    },
    {
      "cve": "CVE-2021-38561",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-38561"
    },
    {
      "cve": "CVE-2021-39293",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-39293"
    },
    {
      "cve": "CVE-2021-41182",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-41182"
    },
    {
      "cve": "CVE-2021-41183",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-41183"
    },
    {
      "cve": "CVE-2021-41184",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-41184"
    },
    {
      "cve": "CVE-2021-41771",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-41771"
    },
    {
      "cve": "CVE-2021-41772",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-41772"
    },
    {
      "cve": "CVE-2021-43565",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-43565"
    },
    {
      "cve": "CVE-2021-44716",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-44716"
    },
    {
      "cve": "CVE-2021-44717",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2021-44717"
    },
    {
      "cve": "CVE-2022-1705",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-1705"
    },
    {
      "cve": "CVE-2022-1941",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-1941"
    },
    {
      "cve": "CVE-2022-1962",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-1962"
    },
    {
      "cve": "CVE-2022-22576",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-22576"
    },
    {
      "cve": "CVE-2022-2309",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-2309"
    },
    {
      "cve": "CVE-2022-23491",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-23491"
    },
    {
      "cve": "CVE-2022-23772",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-23772"
    },
    {
      "cve": "CVE-2022-23773",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-23773"
    },
    {
      "cve": "CVE-2022-23806",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-23806"
    },
    {
      "cve": "CVE-2022-24675",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-24675"
    },
    {
      "cve": "CVE-2022-24921",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-24921"
    },
    {
      "cve": "CVE-2022-24999",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-24999"
    },
    {
      "cve": "CVE-2022-25881",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-25881"
    },
    {
      "cve": "CVE-2022-27191",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27191"
    },
    {
      "cve": "CVE-2022-27536",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27536"
    },
    {
      "cve": "CVE-2022-27664",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27664"
    },
    {
      "cve": "CVE-2022-27774",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27774"
    },
    {
      "cve": "CVE-2022-27775",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27775"
    },
    {
      "cve": "CVE-2022-27776",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27776"
    },
    {
      "cve": "CVE-2022-27778",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27778"
    },
    {
      "cve": "CVE-2022-27779",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27779"
    },
    {
      "cve": "CVE-2022-27780",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27780"
    },
    {
      "cve": "CVE-2022-27781",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27781"
    },
    {
      "cve": "CVE-2022-27782",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-27782"
    },
    {
      "cve": "CVE-2022-28131",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-28131"
    },
    {
      "cve": "CVE-2022-28327",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-28327"
    },
    {
      "cve": "CVE-2022-2879",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-2879"
    },
    {
      "cve": "CVE-2022-2880",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-2880"
    },
    {
      "cve": "CVE-2022-29526",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-29526"
    },
    {
      "cve": "CVE-2022-29804",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-29804"
    },
    {
      "cve": "CVE-2022-30115",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30115"
    },
    {
      "cve": "CVE-2022-30580",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30580"
    },
    {
      "cve": "CVE-2022-30629",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30629"
    },
    {
      "cve": "CVE-2022-30630",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30630"
    },
    {
      "cve": "CVE-2022-30631",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30631"
    },
    {
      "cve": "CVE-2022-30632",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30632"
    },
    {
      "cve": "CVE-2022-30633",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30633"
    },
    {
      "cve": "CVE-2022-30634",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30634"
    },
    {
      "cve": "CVE-2022-30635",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-30635"
    },
    {
      "cve": "CVE-2022-31129",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-31129"
    },
    {
      "cve": "CVE-2022-3171",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-3171"
    },
    {
      "cve": "CVE-2022-32148",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32148"
    },
    {
      "cve": "CVE-2022-32149",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32149"
    },
    {
      "cve": "CVE-2022-32189",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32189"
    },
    {
      "cve": "CVE-2022-32205",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32205"
    },
    {
      "cve": "CVE-2022-32206",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32206"
    },
    {
      "cve": "CVE-2022-32207",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32207"
    },
    {
      "cve": "CVE-2022-32208",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32208"
    },
    {
      "cve": "CVE-2022-32221",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-32221"
    },
    {
      "cve": "CVE-2022-33987",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-33987"
    },
    {
      "cve": "CVE-2022-3509",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-3509"
    },
    {
      "cve": "CVE-2022-3510",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-3510"
    },
    {
      "cve": "CVE-2022-3517",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-3517"
    },
    {
      "cve": "CVE-2022-35252",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-35252"
    },
    {
      "cve": "CVE-2022-35260",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-35260"
    },
    {
      "cve": "CVE-2022-35737",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-35737"
    },
    {
      "cve": "CVE-2022-36227",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-36227"
    },
    {
      "cve": "CVE-2022-37599",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-37599"
    },
    {
      "cve": "CVE-2022-37601",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-37601"
    },
    {
      "cve": "CVE-2022-37603",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-37603"
    },
    {
      "cve": "CVE-2022-38900",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-38900"
    },
    {
      "cve": "CVE-2022-40023",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-40023"
    },
    {
      "cve": "CVE-2022-40897",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-40897"
    },
    {
      "cve": "CVE-2022-40899",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-40899"
    },
    {
      "cve": "CVE-2022-41715",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-41715"
    },
    {
      "cve": "CVE-2022-41716",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-41716"
    },
    {
      "cve": "CVE-2022-41720",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-41720"
    },
    {
      "cve": "CVE-2022-41722",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-41722"
    },
    {
      "cve": "CVE-2022-42003",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-42003"
    },
    {
      "cve": "CVE-2022-42004",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-42004"
    },
    {
      "cve": "CVE-2022-42915",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-42915"
    },
    {
      "cve": "CVE-2022-42916",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-42916"
    },
    {
      "cve": "CVE-2022-43551",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-43551"
    },
    {
      "cve": "CVE-2022-43552",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-43552"
    },
    {
      "cve": "CVE-2022-46175",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2022-46175"
    },
    {
      "cve": "CVE-2023-23914",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-23914"
    },
    {
      "cve": "CVE-2023-23915",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-23915"
    },
    {
      "cve": "CVE-2023-23916",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-23916"
    },
    {
      "cve": "CVE-2023-24539",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-24539"
    },
    {
      "cve": "CVE-2023-24540",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-24540"
    },
    {
      "cve": "CVE-2023-27533",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-27533"
    },
    {
      "cve": "CVE-2023-27534",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-27534"
    },
    {
      "cve": "CVE-2023-27535",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-27535"
    },
    {
      "cve": "CVE-2023-27536",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-27536"
    },
    {
      "cve": "CVE-2023-27537",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-27537"
    },
    {
      "cve": "CVE-2023-27538",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-27538"
    },
    {
      "cve": "CVE-2023-29400",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-29400"
    },
    {
      "cve": "CVE-2023-29402",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-29402"
    },
    {
      "cve": "CVE-2023-29403",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-29403"
    },
    {
      "cve": "CVE-2023-29404",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-29404"
    },
    {
      "cve": "CVE-2023-29405",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Third Party Packages in Splunk Splunk Enterprise. Diese Fehler existieren unter anderem in den curl, go, decode-uri-Komponente, got, loader-utils, postcss, color-string, glob-parent, minimatch und moment Komponenten. Ein Angreifer kann diese Schwachstellen ausnutzen, um einen nicht spezifizierten Angriff durchzuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-29405"
    },
    {
      "cve": "CVE-2023-40592",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion \u0027printf\u0027, u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgem\u00e4\u00dfen Signaturvalidierung, einer unsachgem\u00e4\u00dfen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-40592"
    },
    {
      "cve": "CVE-2023-40593",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion \u0027printf\u0027, u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgem\u00e4\u00dfen Signaturvalidierung, einer unsachgem\u00e4\u00dfen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-40593"
    },
    {
      "cve": "CVE-2023-40594",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion \u0027printf\u0027, u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgem\u00e4\u00dfen Signaturvalidierung, einer unsachgem\u00e4\u00dfen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-40594"
    },
    {
      "cve": "CVE-2023-40595",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion \u0027printf\u0027, u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgem\u00e4\u00dfen Signaturvalidierung, einer unsachgem\u00e4\u00dfen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-40595"
    },
    {
      "cve": "CVE-2023-40596",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion \u0027printf\u0027, u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgem\u00e4\u00dfen Signaturvalidierung, einer unsachgem\u00e4\u00dfen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-40596"
    },
    {
      "cve": "CVE-2023-40597",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion \u0027printf\u0027, u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgem\u00e4\u00dfen Signaturvalidierung, einer unsachgem\u00e4\u00dfen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-40597"
    },
    {
      "cve": "CVE-2023-40598",
      "notes": [
        {
          "category": "description",
          "text": "Es bestehen mehrere Schwachstellen in Splunk Splunk Enterprise. Diese Fehler bestehen in den REST-Endpunkten /app/search/table, /saml/acs, Serialized Session Payload, Dynamic Link Library, runshellscript.py und in den runshellscript-Komponenten sowie in der SPL-Funktion \u0027printf\u0027, u. a. aufgrund eines reflektierten Cross-Site-Scripting (XSS), einer unsachgem\u00e4\u00dfen Signaturvalidierung, einer unsachgem\u00e4\u00dfen Ausdrucksvalidierung und eines Path Traversal. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, einen \u0027Denial of Service\u0027-Zustand zu verursachen und seine Privilegien zu erweitern."
        }
      ],
      "product_status": {
        "known_affected": [
          "T033720",
          "T002207",
          "T008911",
          "T033718",
          "T033705",
          "T004914"
        ]
      },
      "release_date": "2023-08-30T22:00:00.000+00:00",
      "title": "CVE-2023-40598"
    }
  ]
}

CVE-2013-7489 (GCVE-0-2013-7489)

Vulnerability from cvelistv5 – Published: 2020-06-26 19:41 – Updated: 2024-08-06 18:09

Summary

The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

3 references

URL	Tags
https://github.com/bbangert/beaker/issues/191	x_refsource_MISC
https://www.openwall.com/lists/oss-security/2020/…	x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1850105	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T18:09:16.993Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/bbangert/beaker/issues/191"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2020/05/14/11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1850105"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-26T19:41:47.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/bbangert/beaker/issues/191"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2020/05/14/11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1850105"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2013-7489",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/bbangert/beaker/issues/191",
              "refsource": "MISC",
              "url": "https://github.com/bbangert/beaker/issues/191"
            },
            {
              "name": "https://www.openwall.com/lists/oss-security/2020/05/14/11",
              "refsource": "MISC",
              "url": "https://www.openwall.com/lists/oss-security/2020/05/14/11"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1850105",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1850105"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2013-7489",
    "datePublished": "2020-06-26T19:41:47.000Z",
    "dateReserved": "2020-06-26T00:00:00.000Z",
    "dateUpdated": "2024-08-06T18:09:16.993Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-10237 (GCVE-0-2018-10237)

Vulnerability from cvelistv5 – Published: 2018-04-26 21:00 – Updated: 2024-08-05 07:32

Summary

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

53 references

URL	Tags
https://access.redhat.com/errata/RHSA-2018:2428	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2740	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2741	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2742	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2598	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2643	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2424	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2423	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2425	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:2927	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1041707	vdb-entryx_refsource_SECTRACK
https://access.redhat.com/errata/RHSA-2018:2743	vendor-advisoryx_refsource_REDHAT
https://lists.apache.org/thread.html/cc48fe770c45…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/19fa48533bc7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/ff8dcfe29377…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/3ddd79c801ed…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/3d5dbdd92ac9…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/33c6bccfeb7a…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/053d9ce4d579…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:2858	vendor-advisoryx_refsource_REDHAT
https://lists.apache.org/thread.html/b0656d359c7d…	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2019:3149	vendor-advisoryx_refsource_REDHAT
https://lists.apache.org/thread.html/519eb0fd4564…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/f9bc3e55f4e2…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r27eb79a87a7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r95799427b33…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rc78f6e84f82…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/ra0adb9653c7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rd0c8ec6e044…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r38e2ab87528…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r2ea4e5e5aa8…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r43491b25b2e…	mailing-listx_refsource_MLIST
https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
https://lists.apache.org/thread.html/rc8467f357b9…	mailing-listx_refsource_MLIST
https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
https://groups.google.com/d/topic/guava-announce/…	x_refsource_CONFIRM
https://lists.apache.org/thread.html/r02e39d7beb3…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r02e39d7beb3…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r50fc0bcc734…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rdc56c15693c…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/ra8906723927…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/ra4f44016926…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rb3da574c34b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r223bc776a07…	mailing-listx_refsource_MLIST
https://www.oracle.com/security-alerts/cpujan2021.html	x_refsource_MISC
https://lists.apache.org/thread.html/r841c5e14e1b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r22c8173b804…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r352e40ca987…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r30e7d7b6bfa…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r3c3b33ee5be…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rd01f5ff0164…	mailing-listx_refsource_MLIST
https://www.oracle.com/security-alerts/cpuoct2021.html	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022062…	x_refsource_CONFIRM

Date Public

2018-04-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:32:01.750Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:2428",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2428"
          },
          {
            "name": "RHSA-2018:2740",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2740"
          },
          {
            "name": "RHSA-2018:2741",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2741"
          },
          {
            "name": "RHSA-2018:2742",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2742"
          },
          {
            "name": "RHSA-2018:2598",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2598"
          },
          {
            "name": "RHSA-2018:2643",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2643"
          },
          {
            "name": "RHSA-2018:2424",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2424"
          },
          {
            "name": "RHSA-2018:2423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2423"
          },
          {
            "name": "RHSA-2018:2425",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2425"
          },
          {
            "name": "RHSA-2018:2927",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2927"
          },
          {
            "name": "1041707",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041707"
          },
          {
            "name": "RHSA-2018:2743",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2743"
          },
          {
            "name": "[hadoop-hdfs-dev] 20190401 Update guava to 27.0-jre in hadoop-project",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/cc48fe770c45a74dc3b37ed0817393e0c96701fc49bc431ed922f3cc%40%3Chdfs-dev.hadoop.apache.org%3E"
          },
          {
            "name": "[hadoop-common-dev] 20190401 Update guava to 27.0-jre in hadoop-project",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/19fa48533bc7ea1accf6b12746a74ed888ae6e49a5cf81ae4f807495%40%3Ccommon-dev.hadoop.apache.org%3E"
          },
          {
            "name": "[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E"
          },
          {
            "name": "[activemq-issues] 20190516 [jira] [Created] (AMQ-7208) Security Issue related to Guava 18.0",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/3ddd79c801edd99c0978e83dbe2168ebd36fd42acfa5dac38fb03dd6%40%3Cissues.activemq.apache.org%3E"
          },
          {
            "name": "[activemq-gitbox] 20190530 [GitHub] [activemq-artemis] brusdev opened a new pull request #2687: ARTEMIS-2359 Upgrade to Guava 24.1",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084%40%3Cgitbox.activemq.apache.org%3E"
          },
          {
            "name": "[cassandra-commits] 20190612 [jira] [Assigned] (CASSANDRA-14760) CVE-2018-10237 Security vulnerability in 3.11.3",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085%40%3Ccommits.cassandra.apache.org%3E"
          },
          {
            "name": "[activemq-issues] 20190820 [jira] [Created] (AMQ-7279) Security Vulnerabilities in Libraries - jackson-databind-2.9.8.jar, tomcat-servlet-api-8.0.53.jar, tomcat-websocket-api-8.0.53.jar, zookeeper-3.4.6.jar, guava-18.0.jar, jetty-all-9.2.26.v20180806.jar, scala-library-2.11.0.jar",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E"
          },
          {
            "name": "RHSA-2019:2858",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2858"
          },
          {
            "name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E"
          },
          {
            "name": "RHSA-2019:3149",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3149"
          },
          {
            "name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
          },
          {
            "name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
          },
          {
            "name": "[cxf-dev] 20200206 [GitHub] [cxf] davidkarlsen opened a new pull request #638: upgrade guava, CVE-2018-10237",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r27eb79a87a760335226dbfa6a7b7bffea539a535f8e80c41e482106d%40%3Cdev.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-dev] 20200206 [GitHub] [cxf] reta commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r95799427b335807a4c54776908125c3e66597b65845ae50096d9278a%40%3Cdev.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-dev] 20200211 [GitHub] [cxf] coheigea commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rc78f6e84f82cc662860e96526d8ab969f34dbe12dc560e22d9d147a3%40%3Cdev.cxf.apache.org%3E"
          },
          {
            "name": "[kafka-users] 20200413 CVEs for the dependency software guava and rocksdbjni of Kafka",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E"
          },
          {
            "name": "[cxf-dev] 20200420 [GitHub] [cxf] coheigea commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rd0c8ec6e044aa2958dd0549ebf8ecead7f5968c9474ba73a504161b2%40%3Cdev.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-dev] 20200420 [GitHub] [cxf] reta commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r38e2ab87528d3c904e7fac496e8fd766b9277656ff95b97d6b6b6dcd%40%3Cdev.cxf.apache.org%3E"
          },
          {
            "name": "[cxf-dev] 20200420 [GitHub] [cxf] andrei-ivanov commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r2ea4e5e5aa8ad73b001a466c582899620961f47d77a40af712c1fdf9%40%3Cdev.cxf.apache.org%3E"
          },
          {
            "name": "[syncope-dev] 20200423 Re: Time to cut 2.1.6 / 2.0.15?",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540%40%3Cdev.syncope.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
          },
          {
            "name": "[hadoop-common-dev] 20200623 Update guava to 27.0-jre in hadoop branch-2.10",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rc8467f357b943ceaa86f289f8bc1a5d1c7955b75d3bac1426f2d4ac1%40%3Ccommon-dev.hadoop.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion"
          },
          {
            "name": "[flink-dev] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb%40%3Cdev.flink.apache.org%3E"
          },
          {
            "name": "[flink-user] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb%40%3Cuser.flink.apache.org%3E"
          },
          {
            "name": "[flink-dev] 20200806 [jira] [Created] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r50fc0bcc734dd82e691d36d209258683141bfc0083739a77e56ad92d%40%3Cdev.flink.apache.org%3E"
          },
          {
            "name": "[flink-issues] 20200806 [jira] [Created] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rdc56c15693c236e31e1e95f847b8e5e74fc0a05741d47488e7fc8c45%40%3Cissues.flink.apache.org%3E"
          },
          {
            "name": "[flink-issues] 20200814 [jira] [Commented] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/ra8906723927aef2a599398c238eacfc845b74d812e0093ec2fc70a7d%40%3Cissues.flink.apache.org%3E"
          },
          {
            "name": "[lucene-issues] 20201022 [jira] [Created] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84%40%3Cissues.lucene.apache.org%3E"
          },
          {
            "name": "[lucene-issues] 20201022 [jira] [Updated] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rb3da574c34bc6bd37972d2266af3093b90d7e437460423c24f477919%40%3Cissues.lucene.apache.org%3E"
          },
          {
            "name": "[lucene-issues] 20201022 [jira] [Resolved] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55%40%3Cissues.lucene.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
          },
          {
            "name": "[maven-issues] 20210122 [GitHub] [maven-indexer] akurtakov opened a new pull request #75: Remove guava dependency from indexer-core",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba%40%3Cissues.maven.apache.org%3E"
          },
          {
            "name": "[flink-issues] 20210212 [jira] [Closed] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r22c8173b804cd4a420c43064ba4e363d0022aa421008b1989f7354d4%40%3Cissues.flink.apache.org%3E"
          },
          {
            "name": "[samza-commits] 20210310 [GitHub] [samza] Telesia opened a new pull request #1471: SAMZA-2630: Upgrade dependencies for security fixes",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21%40%3Ccommits.samza.apache.org%3E"
          },
          {
            "name": "[storm-issues] 20210315 [jira] [Created] (STORM-3754) Upgrade Guava version because of security vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r30e7d7b6bfa630dacc41649a0e96dad75165d50474c1241068aa0f94%40%3Cissues.storm.apache.org%3E"
          },
          {
            "name": "[pulsar-commits] 20210406 [GitHub] [pulsar] lhotari opened a new pull request #10149: Upgrade jclouds to 2.3.0 to fix security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748%40%3Ccommits.pulsar.apache.org%3E"
          },
          {
            "name": "[arrow-github] 20210610 [GitHub] [arrow] projjal opened a new pull request #10501: ARROW-13032: Update guava version",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95%40%3Cgithub.arrow.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220629-0008/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-04-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-06-29T18:07:18.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHSA-2018:2428",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2428"
        },
        {
          "name": "RHSA-2018:2740",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2740"
        },
        {
          "name": "RHSA-2018:2741",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2741"
        },
        {
          "name": "RHSA-2018:2742",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2742"
        },
        {
          "name": "RHSA-2018:2598",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2598"
        },
        {
          "name": "RHSA-2018:2643",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2643"
        },
        {
          "name": "RHSA-2018:2424",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2424"
        },
        {
          "name": "RHSA-2018:2423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2423"
        },
        {
          "name": "RHSA-2018:2425",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2425"
        },
        {
          "name": "RHSA-2018:2927",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2927"
        },
        {
          "name": "1041707",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041707"
        },
        {
          "name": "RHSA-2018:2743",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2743"
        },
        {
          "name": "[hadoop-hdfs-dev] 20190401 Update guava to 27.0-jre in hadoop-project",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/cc48fe770c45a74dc3b37ed0817393e0c96701fc49bc431ed922f3cc%40%3Chdfs-dev.hadoop.apache.org%3E"
        },
        {
          "name": "[hadoop-common-dev] 20190401 Update guava to 27.0-jre in hadoop-project",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/19fa48533bc7ea1accf6b12746a74ed888ae6e49a5cf81ae4f807495%40%3Ccommon-dev.hadoop.apache.org%3E"
        },
        {
          "name": "[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E"
        },
        {
          "name": "[activemq-issues] 20190516 [jira] [Created] (AMQ-7208) Security Issue related to Guava 18.0",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/3ddd79c801edd99c0978e83dbe2168ebd36fd42acfa5dac38fb03dd6%40%3Cissues.activemq.apache.org%3E"
        },
        {
          "name": "[activemq-gitbox] 20190530 [GitHub] [activemq-artemis] brusdev opened a new pull request #2687: ARTEMIS-2359 Upgrade to Guava 24.1",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084%40%3Cgitbox.activemq.apache.org%3E"
        },
        {
          "name": "[cassandra-commits] 20190612 [jira] [Assigned] (CASSANDRA-14760) CVE-2018-10237 Security vulnerability in 3.11.3",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085%40%3Ccommits.cassandra.apache.org%3E"
        },
        {
          "name": "[activemq-issues] 20190820 [jira] [Created] (AMQ-7279) Security Vulnerabilities in Libraries - jackson-databind-2.9.8.jar, tomcat-servlet-api-8.0.53.jar, tomcat-websocket-api-8.0.53.jar, zookeeper-3.4.6.jar, guava-18.0.jar, jetty-all-9.2.26.v20180806.jar, scala-library-2.11.0.jar",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272%40%3Cissues.activemq.apache.org%3E"
        },
        {
          "name": "RHSA-2019:2858",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2858"
        },
        {
          "name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E"
        },
        {
          "name": "RHSA-2019:3149",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3149"
        },
        {
          "name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
        },
        {
          "name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
        },
        {
          "name": "[cxf-dev] 20200206 [GitHub] [cxf] davidkarlsen opened a new pull request #638: upgrade guava, CVE-2018-10237",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r27eb79a87a760335226dbfa6a7b7bffea539a535f8e80c41e482106d%40%3Cdev.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-dev] 20200206 [GitHub] [cxf] reta commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r95799427b335807a4c54776908125c3e66597b65845ae50096d9278a%40%3Cdev.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-dev] 20200211 [GitHub] [cxf] coheigea commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rc78f6e84f82cc662860e96526d8ab969f34dbe12dc560e22d9d147a3%40%3Cdev.cxf.apache.org%3E"
        },
        {
          "name": "[kafka-users] 20200413 CVEs for the dependency software guava and rocksdbjni of Kafka",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3E"
        },
        {
          "name": "[cxf-dev] 20200420 [GitHub] [cxf] coheigea commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rd0c8ec6e044aa2958dd0549ebf8ecead7f5968c9474ba73a504161b2%40%3Cdev.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-dev] 20200420 [GitHub] [cxf] reta commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r38e2ab87528d3c904e7fac496e8fd766b9277656ff95b97d6b6b6dcd%40%3Cdev.cxf.apache.org%3E"
        },
        {
          "name": "[cxf-dev] 20200420 [GitHub] [cxf] andrei-ivanov commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r2ea4e5e5aa8ad73b001a466c582899620961f47d77a40af712c1fdf9%40%3Cdev.cxf.apache.org%3E"
        },
        {
          "name": "[syncope-dev] 20200423 Re: Time to cut 2.1.6 / 2.0.15?",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540%40%3Cdev.syncope.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
        },
        {
          "name": "[hadoop-common-dev] 20200623 Update guava to 27.0-jre in hadoop branch-2.10",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rc8467f357b943ceaa86f289f8bc1a5d1c7955b75d3bac1426f2d4ac1%40%3Ccommon-dev.hadoop.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion"
        },
        {
          "name": "[flink-dev] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb%40%3Cdev.flink.apache.org%3E"
        },
        {
          "name": "[flink-user] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb%40%3Cuser.flink.apache.org%3E"
        },
        {
          "name": "[flink-dev] 20200806 [jira] [Created] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r50fc0bcc734dd82e691d36d209258683141bfc0083739a77e56ad92d%40%3Cdev.flink.apache.org%3E"
        },
        {
          "name": "[flink-issues] 20200806 [jira] [Created] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rdc56c15693c236e31e1e95f847b8e5e74fc0a05741d47488e7fc8c45%40%3Cissues.flink.apache.org%3E"
        },
        {
          "name": "[flink-issues] 20200814 [jira] [Commented] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/ra8906723927aef2a599398c238eacfc845b74d812e0093ec2fc70a7d%40%3Cissues.flink.apache.org%3E"
        },
        {
          "name": "[lucene-issues] 20201022 [jira] [Created] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84%40%3Cissues.lucene.apache.org%3E"
        },
        {
          "name": "[lucene-issues] 20201022 [jira] [Updated] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rb3da574c34bc6bd37972d2266af3093b90d7e437460423c24f477919%40%3Cissues.lucene.apache.org%3E"
        },
        {
          "name": "[lucene-issues] 20201022 [jira] [Resolved] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55%40%3Cissues.lucene.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
        },
        {
          "name": "[maven-issues] 20210122 [GitHub] [maven-indexer] akurtakov opened a new pull request #75: Remove guava dependency from indexer-core",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba%40%3Cissues.maven.apache.org%3E"
        },
        {
          "name": "[flink-issues] 20210212 [jira] [Closed] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r22c8173b804cd4a420c43064ba4e363d0022aa421008b1989f7354d4%40%3Cissues.flink.apache.org%3E"
        },
        {
          "name": "[samza-commits] 20210310 [GitHub] [samza] Telesia opened a new pull request #1471: SAMZA-2630: Upgrade dependencies for security fixes",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21%40%3Ccommits.samza.apache.org%3E"
        },
        {
          "name": "[storm-issues] 20210315 [jira] [Created] (STORM-3754) Upgrade Guava version because of security vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r30e7d7b6bfa630dacc41649a0e96dad75165d50474c1241068aa0f94%40%3Cissues.storm.apache.org%3E"
        },
        {
          "name": "[pulsar-commits] 20210406 [GitHub] [pulsar] lhotari opened a new pull request #10149: Upgrade jclouds to 2.3.0 to fix security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748%40%3Ccommits.pulsar.apache.org%3E"
        },
        {
          "name": "[arrow-github] 20210610 [GitHub] [arrow] projjal opened a new pull request #10501: ARROW-13032: Update guava version",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95%40%3Cgithub.arrow.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220629-0008/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-10237",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:2428",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2428"
            },
            {
              "name": "RHSA-2018:2740",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2740"
            },
            {
              "name": "RHSA-2018:2741",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2741"
            },
            {
              "name": "RHSA-2018:2742",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2742"
            },
            {
              "name": "RHSA-2018:2598",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2598"
            },
            {
              "name": "RHSA-2018:2643",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2643"
            },
            {
              "name": "RHSA-2018:2424",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2424"
            },
            {
              "name": "RHSA-2018:2423",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2423"
            },
            {
              "name": "RHSA-2018:2425",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2425"
            },
            {
              "name": "RHSA-2018:2927",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2927"
            },
            {
              "name": "1041707",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041707"
            },
            {
              "name": "RHSA-2018:2743",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2743"
            },
            {
              "name": "[hadoop-hdfs-dev] 20190401 Update guava to 27.0-jre in hadoop-project",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/cc48fe770c45a74dc3b37ed0817393e0c96701fc49bc431ed922f3cc@%3Chdfs-dev.hadoop.apache.org%3E"
            },
            {
              "name": "[hadoop-common-dev] 20190401 Update guava to 27.0-jre in hadoop-project",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/19fa48533bc7ea1accf6b12746a74ed888ae6e49a5cf81ae4f807495@%3Ccommon-dev.hadoop.apache.org%3E"
            },
            {
              "name": "[pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E"
            },
            {
              "name": "[activemq-issues] 20190516 [jira] [Created] (AMQ-7208) Security Issue related to Guava 18.0",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/3ddd79c801edd99c0978e83dbe2168ebd36fd42acfa5dac38fb03dd6@%3Cissues.activemq.apache.org%3E"
            },
            {
              "name": "[activemq-gitbox] 20190530 [GitHub] [activemq-artemis] brusdev opened a new pull request #2687: ARTEMIS-2359 Upgrade to Guava 24.1",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084@%3Cgitbox.activemq.apache.org%3E"
            },
            {
              "name": "[cassandra-commits] 20190612 [jira] [Assigned] (CASSANDRA-14760) CVE-2018-10237 Security vulnerability in 3.11.3",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085@%3Ccommits.cassandra.apache.org%3E"
            },
            {
              "name": "[activemq-issues] 20190820 [jira] [Created] (AMQ-7279) Security Vulnerabilities in Libraries - jackson-databind-2.9.8.jar, tomcat-servlet-api-8.0.53.jar, tomcat-websocket-api-8.0.53.jar, zookeeper-3.4.6.jar, guava-18.0.jar, jetty-all-9.2.26.v20180806.jar, scala-library-2.11.0.jar",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E"
            },
            {
              "name": "RHSA-2019:2858",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:2858"
            },
            {
              "name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E"
            },
            {
              "name": "RHSA-2019:3149",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:3149"
            },
            {
              "name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E"
            },
            {
              "name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E"
            },
            {
              "name": "[cxf-dev] 20200206 [GitHub] [cxf] davidkarlsen opened a new pull request #638: upgrade guava, CVE-2018-10237",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r27eb79a87a760335226dbfa6a7b7bffea539a535f8e80c41e482106d@%3Cdev.cxf.apache.org%3E"
            },
            {
              "name": "[cxf-dev] 20200206 [GitHub] [cxf] reta commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r95799427b335807a4c54776908125c3e66597b65845ae50096d9278a@%3Cdev.cxf.apache.org%3E"
            },
            {
              "name": "[cxf-dev] 20200211 [GitHub] [cxf] coheigea commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rc78f6e84f82cc662860e96526d8ab969f34dbe12dc560e22d9d147a3@%3Cdev.cxf.apache.org%3E"
            },
            {
              "name": "[kafka-users] 20200413 CVEs for the dependency software guava and rocksdbjni of Kafka",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E"
            },
            {
              "name": "[cxf-dev] 20200420 [GitHub] [cxf] coheigea commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rd0c8ec6e044aa2958dd0549ebf8ecead7f5968c9474ba73a504161b2@%3Cdev.cxf.apache.org%3E"
            },
            {
              "name": "[cxf-dev] 20200420 [GitHub] [cxf] reta commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r38e2ab87528d3c904e7fac496e8fd766b9277656ff95b97d6b6b6dcd@%3Cdev.cxf.apache.org%3E"
            },
            {
              "name": "[cxf-dev] 20200420 [GitHub] [cxf] andrei-ivanov commented on a change in pull request #638: upgrade guava, CVE-2018-10237",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r2ea4e5e5aa8ad73b001a466c582899620961f47d77a40af712c1fdf9@%3Cdev.cxf.apache.org%3E"
            },
            {
              "name": "[syncope-dev] 20200423 Re: Time to cut 2.1.6 / 2.0.15?",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540@%3Cdev.syncope.apache.org%3E"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuapr2020.html"
            },
            {
              "name": "[hadoop-common-dev] 20200623 Update guava to 27.0-jre in hadoop branch-2.10",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rc8467f357b943ceaa86f289f8bc1a5d1c7955b75d3bac1426f2d4ac1@%3Ccommon-dev.hadoop.apache.org%3E"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujul2020.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujul2020.html"
            },
            {
              "name": "https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion",
              "refsource": "CONFIRM",
              "url": "https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion"
            },
            {
              "name": "[flink-dev] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cdev.flink.apache.org%3E"
            },
            {
              "name": "[flink-user] 20200806 Dependency vulnerabilities with Apache Flink 1.10.1 version",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cuser.flink.apache.org%3E"
            },
            {
              "name": "[flink-dev] 20200806 [jira] [Created] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r50fc0bcc734dd82e691d36d209258683141bfc0083739a77e56ad92d@%3Cdev.flink.apache.org%3E"
            },
            {
              "name": "[flink-issues] 20200806 [jira] [Created] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rdc56c15693c236e31e1e95f847b8e5e74fc0a05741d47488e7fc8c45@%3Cissues.flink.apache.org%3E"
            },
            {
              "name": "[flink-issues] 20200814 [jira] [Commented] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/ra8906723927aef2a599398c238eacfc845b74d812e0093ec2fc70a7d@%3Cissues.flink.apache.org%3E"
            },
            {
              "name": "[lucene-issues] 20201022 [jira] [Created] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84@%3Cissues.lucene.apache.org%3E"
            },
            {
              "name": "[lucene-issues] 20201022 [jira] [Updated] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rb3da574c34bc6bd37972d2266af3093b90d7e437460423c24f477919@%3Cissues.lucene.apache.org%3E"
            },
            {
              "name": "[lucene-issues] 20201022 [jira] [Resolved] (SOLR-14960) Solr-clustering is bringing in CVE-2018-10237 vulnerable guava",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55@%3Cissues.lucene.apache.org%3E"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujan2021.html"
            },
            {
              "name": "[maven-issues] 20210122 [GitHub] [maven-indexer] akurtakov opened a new pull request #75: Remove guava dependency from indexer-core",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E"
            },
            {
              "name": "[flink-issues] 20210212 [jira] [Closed] (FLINK-18841) CVE-2018-10237 and CWE-400 occurred in flink dependency",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r22c8173b804cd4a420c43064ba4e363d0022aa421008b1989f7354d4@%3Cissues.flink.apache.org%3E"
            },
            {
              "name": "[samza-commits] 20210310 [GitHub] [samza] Telesia opened a new pull request #1471: SAMZA-2630: Upgrade dependencies for security fixes",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21@%3Ccommits.samza.apache.org%3E"
            },
            {
              "name": "[storm-issues] 20210315 [jira] [Created] (STORM-3754) Upgrade Guava version because of security vulnerability",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r30e7d7b6bfa630dacc41649a0e96dad75165d50474c1241068aa0f94@%3Cissues.storm.apache.org%3E"
            },
            {
              "name": "[pulsar-commits] 20210406 [GitHub] [pulsar] lhotari opened a new pull request #10149: Upgrade jclouds to 2.3.0 to fix security vulnerabilities",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E"
            },
            {
              "name": "[arrow-github] 20210610 [GitHub] [arrow] projjal opened a new pull request #10501: ARROW-13032: Update guava version",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuoct2021.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpuoct2021.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220629-0008/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220629-0008/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-10237",
    "datePublished": "2018-04-26T21:00:00.000Z",
    "dateReserved": "2018-04-20T00:00:00.000Z",
    "dateUpdated": "2024-08-05T07:32:01.750Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2018-20225 (GCVE-0-2018-20225)

Vulnerability from cvelistv5 – Published: 2020-05-08 17:29 – Updated: 2026-04-15 20:50 Disputed

Summary

An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Assigner

mitre

References

4 references

URL	Tags
https://pip.pypa.io/en/stable/news/	x_refsource_MISC
https://cowlicks.website/posts/arbitrary-code-exe…	x_refsource_MISC
https://lists.apache.org/thread.html/rb1adce79844…	mailing-listx_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1835736	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T11:58:18.416Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://pip.pypa.io/en/stable/news/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cowlicks.website/posts/arbitrary-code-execution-from-pips-extra-index-url.html"
          },
          {
            "name": "[arrow-github] 20200527 [GitHub] [arrow] BinduAggarwal opened a new pull request #7294: upgrading pip/wheel/setuptools",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rb1adce798445facd032870d644eb39c4baaf9c4a7dd5477d12bb6ab2%40%3Cgithub.arrow.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1835736"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2018-20225",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-15T20:50:08.134320Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-20",
                "description": "CWE-20 Improper Input Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-15T20:50:17.582Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-01T16:05:34.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://pip.pypa.io/en/stable/news/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cowlicks.website/posts/arbitrary-code-execution-from-pips-extra-index-url.html"
        },
        {
          "name": "[arrow-github] 20200527 [GitHub] [arrow] BinduAggarwal opened a new pull request #7294: upgrading pip/wheel/setuptools",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rb1adce798445facd032870d644eb39c4baaf9c4a7dd5477d12bb6ab2%40%3Cgithub.arrow.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1835736"
        }
      ],
      "tags": [
        "disputed"
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-20225",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "** DISPUTED ** An issue was discovered in pip (all versions) because it installs the version with the highest version number, even if the user had intended to obtain a private package from a private index. This only affects use of the --extra-index-url option, and exploitation requires that the package does not already exist in the public index (and thus the attacker can put the package there with an arbitrary version number). NOTE: it has been reported that this is intended functionality and the user is responsible for using --extra-index-url securely."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://pip.pypa.io/en/stable/news/",
              "refsource": "MISC",
              "url": "https://pip.pypa.io/en/stable/news/"
            },
            {
              "name": "https://cowlicks.website/posts/arbitrary-code-execution-from-pips-extra-index-url.html",
              "refsource": "MISC",
              "url": "https://cowlicks.website/posts/arbitrary-code-execution-from-pips-extra-index-url.html"
            },
            {
              "name": "[arrow-github] 20200527 [GitHub] [arrow] BinduAggarwal opened a new pull request #7294: upgrading pip/wheel/setuptools",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rb1adce798445facd032870d644eb39c4baaf9c4a7dd5477d12bb6ab2@%3Cgithub.arrow.apache.org%3E"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1835736",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1835736"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-20225",
    "datePublished": "2020-05-08T17:29:12.000Z",
    "dateReserved": "2018-12-19T00:00:00.000Z",
    "dateUpdated": "2026-04-15T20:50:17.582Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2019-20454 (GCVE-0-2019-20454)

Vulnerability from cvelistv5 – Published: 2020-02-14 00:00 – Updated: 2024-08-05 02:39

Summary

An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c.

Severity

5.1 (Medium)


                        
                          CVSS:3.0/AC:H/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N

CWE

Assigner

mitre

References

7 references

URL	Tags
https://bugs.exim.org/show_bug.cgi?id=2421
https://bugs.php.net/bug.php?id=78338
https://vcs.pcre.org/pcre2?view=revision&revision=1092
https://bugzilla.redhat.com/show_bug.cgi?id=1735494
https://security.gentoo.org/glsa/202006-16	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:39:09.902Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugs.exim.org/show_bug.cgi?id=2421"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugs.php.net/bug.php?id=78338"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://vcs.pcre.org/pcre2?view=revision\u0026revision=1092"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735494"
          },
          {
            "name": "GLSA-202006-16",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202006-16"
          },
          {
            "name": "FEDORA-2020-b11cf352bd",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQRAHYHLRNMBTPR3KXVM27NSZP3KTOPI/"
          },
          {
            "name": "[debian-lts-announce] 20230316 [SECURITY] [DLA 3363-1] pcre2 security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read was discovered in PCRE before 10.34 when the pattern \\X is JIT compiled and used to match specially crafted subjects in non-UTF mode. Applications that use PCRE to parse untrusted input may be vulnerable to this flaw, which would allow an attacker to crash the application. The flaw occurs in do_extuni_no_utf in pcre2_jit_compile.c."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AC:H/AV:L/A:H/C:N/I:N/PR:N/S:U/UI:N",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-03-16T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://bugs.exim.org/show_bug.cgi?id=2421"
        },
        {
          "url": "https://bugs.php.net/bug.php?id=78338"
        },
        {
          "url": "https://vcs.pcre.org/pcre2?view=revision\u0026revision=1092"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1735494"
        },
        {
          "name": "GLSA-202006-16",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202006-16"
        },
        {
          "name": "FEDORA-2020-b11cf352bd",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OQRAHYHLRNMBTPR3KXVM27NSZP3KTOPI/"
        },
        {
          "name": "[debian-lts-announce] 20230316 [SECURITY] [DLA 3363-1] pcre2 security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-20454",
    "datePublished": "2020-02-14T00:00:00.000Z",
    "dateReserved": "2020-02-14T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:39:09.902Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2019-20838 (GCVE-0-2019-20838)

Vulnerability from cvelistv5 – Published: 2020-06-15 16:50 – Updated: 2024-08-05 02:53

Summary

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X or \R has more than one fixed quantifier, a related issue to CVE-2019-20454.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

7 references

URL	Tags
https://bugs.gentoo.org/717920	x_refsource_MISC
https://www.pcre.org/original/changelog.txt	x_refsource_MISC
https://support.apple.com/kb/HT211931	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2020/Dec/32	mailing-listx_refsource_FULLDISC
https://support.apple.com/kb/HT212147	x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2021/Feb/14	mailing-listx_refsource_FULLDISC
https://lists.apache.org/thread.html/rf9fa47ab664…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T02:53:09.397Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.gentoo.org/717920"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.pcre.org/original/changelog.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT211931"
          },
          {
            "name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2020/Dec/32"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212147"
          },
          {
            "name": "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Feb/14"
          },
          {
            "name": "[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-25T16:06:43.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.gentoo.org/717920"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.pcre.org/original/changelog.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT211931"
        },
        {
          "name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2020/Dec/32"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.apple.com/kb/HT212147"
        },
        {
          "name": "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Feb/14"
        },
        {
          "name": "[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-20838",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \\X or \\R has more than one fixed quantifier, a related issue to CVE-2019-20454."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugs.gentoo.org/717920",
              "refsource": "MISC",
              "url": "https://bugs.gentoo.org/717920"
            },
            {
              "name": "https://www.pcre.org/original/changelog.txt",
              "refsource": "MISC",
              "url": "https://www.pcre.org/original/changelog.txt"
            },
            {
              "name": "https://support.apple.com/kb/HT211931",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT211931"
            },
            {
              "name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2020/Dec/32"
            },
            {
              "name": "https://support.apple.com/kb/HT212147",
              "refsource": "CONFIRM",
              "url": "https://support.apple.com/kb/HT212147"
            },
            {
              "name": "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2021/Feb/14"
            },
            {
              "name": "[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-20838",
    "datePublished": "2020-06-15T16:50:48.000Z",
    "dateReserved": "2020-06-15T00:00:00.000Z",
    "dateUpdated": "2024-08-05T02:53:09.397Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-14155 (GCVE-0-2020-14155)

Vulnerability from cvelistv5 – Published: 2020-06-15 00:00 – Updated: 2024-08-04 12:39

Summary

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

10 references

URL	Tags
https://bugs.gentoo.org/717920
https://www.pcre.org/original/changelog.txt
http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list
https://support.apple.com/kb/HT211931
http://seclists.org/fulldisclosure/2021/Feb/14	mailing-list
https://lists.apache.org/thread.html/rf9fa47ab664…	mailing-list
https://support.apple.com/kb/HT212147
https://www.oracle.com/security-alerts/cpuapr2022.html
https://about.gitlab.com/releases/2020/07/01/secu…
https://security.netapp.com/advisory/ntap-2022102…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T12:39:36.025Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugs.gentoo.org/717920"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.pcre.org/original/changelog.txt"
          },
          {
            "name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2020/Dec/32"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT211931"
          },
          {
            "name": "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2021/Feb/14"
          },
          {
            "name": "[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT212147"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://about.gitlab.com/releases/2020/07/01/security-release-13-1-2-release/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0010/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-28T00:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://bugs.gentoo.org/717920"
        },
        {
          "url": "https://www.pcre.org/original/changelog.txt"
        },
        {
          "name": "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2020/Dec/32"
        },
        {
          "url": "https://support.apple.com/kb/HT211931"
        },
        {
          "name": "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2021/Feb/14"
        },
        {
          "name": "[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"
        },
        {
          "url": "https://support.apple.com/kb/HT212147"
        },
        {
          "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
        },
        {
          "url": "https://about.gitlab.com/releases/2020/07/01/security-release-13-1-2-release/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0010/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-14155",
    "datePublished": "2020-06-15T00:00:00.000Z",
    "dateReserved": "2020-06-15T00:00:00.000Z",
    "dateUpdated": "2024-08-04T12:39:36.025Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-28469 (GCVE-0-2020-28469)

Vulnerability from cvelistv5 – Published: 2021-06-03 15:15 – Updated: 2024-09-16 18:43

Title

Regular Expression Denial of Service (ReDoS)

Summary

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

Regular Expression Denial of Service (ReDoS)

Assigner

snyk

References

7 references

URL	Tags
https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905	x_refsource_MISC
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092	x_refsource_MISC
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGIT…	x_refsource_MISC
https://github.com/gulpjs/glob-parent/blob/6ce8d1…	x_refsource_MISC
https://github.com/gulpjs/glob-parent/pull/36	x_refsource_MISC
https://github.com/gulpjs/glob-parent/releases/ta…	x_refsource_MISC
https://www.oracle.com/security-alerts/cpujan2022.html	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
n/a	glob-parent	Affected: unspecified , < 5.1.2 (custom)

Date Public

2021-06-03 00:00

Credits

Yeting Li

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T16:40:59.197Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/gulpjs/glob-parent/pull/36"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "glob-parent",
          "vendor": "n/a",
          "versions": [
            {
              "lessThan": "5.1.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Yeting Li"
        }
      ],
      "datePublic": "2021-06-03T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Regular Expression Denial of Service (ReDoS)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-07T14:40:42.000Z",
        "orgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
        "shortName": "snyk"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gulpjs/glob-parent/pull/36"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
        }
      ],
      "title": "Regular Expression Denial of Service (ReDoS)",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "report@snyk.io",
          "DATE_PUBLIC": "2021-06-03T15:14:03.687376Z",
          "ID": "CVE-2020-28469",
          "STATE": "PUBLIC",
          "TITLE": "Regular Expression Denial of Service (ReDoS)"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "glob-parent",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "5.1.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Yeting Li"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Regular Expression Denial of Service (ReDoS)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905",
              "refsource": "MISC",
              "url": "https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905"
            },
            {
              "name": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092",
              "refsource": "MISC",
              "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1059092"
            },
            {
              "name": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093",
              "refsource": "MISC",
              "url": "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBES128-1059093"
            },
            {
              "name": "https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9",
              "refsource": "MISC",
              "url": "https://github.com/gulpjs/glob-parent/blob/6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474/index.js%23L9"
            },
            {
              "name": "https://github.com/gulpjs/glob-parent/pull/36",
              "refsource": "MISC",
              "url": "https://github.com/gulpjs/glob-parent/pull/36"
            },
            {
              "name": "https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2",
              "refsource": "MISC",
              "url": "https://github.com/gulpjs/glob-parent/releases/tag/v5.1.2"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2022.html",
              "refsource": "MISC",
              "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
    "assignerShortName": "snyk",
    "cveId": "CVE-2020-28469",
    "datePublished": "2021-06-03T15:15:13.479Z",
    "dateReserved": "2020-11-12T00:00:00.000Z",
    "dateUpdated": "2024-09-16T18:43:30.050Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-28851 (GCVE-0-2020-28851)

Vulnerability from cvelistv5 – Published: 2021-01-02 05:42 – Updated: 2024-08-04 16:40

Summary

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

Severity

No CVSS data available.

CWE

Assigner

mitre

References

2 references

URL	Tags
https://github.com/golang/go/issues/42535	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2021021…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T16:40:59.804Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/golang/go/issues/42535"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20210212-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In x/text in Go 1.15.4, an \"index out of range\" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-02-12T10:06:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/golang/go/issues/42535"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20210212-0004/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-28851",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In x/text in Go 1.15.4, an \"index out of range\" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/golang/go/issues/42535",
              "refsource": "MISC",
              "url": "https://github.com/golang/go/issues/42535"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20210212-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20210212-0004/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-28851",
    "datePublished": "2021-01-02T05:42:40.000Z",
    "dateReserved": "2020-11-16T00:00:00.000Z",
    "dateUpdated": "2024-08-04T16:40:59.804Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-29652 (GCVE-0-2020-29652)

Vulnerability from cvelistv5 – Published: 2020-12-17 04:12 – Updated: 2024-08-04 16:55

Summary

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

3 references

URL	Tags
https://groups.google.com/g/golang-announce/c/ouZ…	x_refsource_MISC
https://go-review.googlesource.com/c/crypto/+/278852	x_refsource_MISC
https://lists.apache.org/thread.html/r68032132c03…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T16:55:10.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://go-review.googlesource.com/c/crypto/+/278852"
          },
          {
            "name": "[skywalking-notifications] 20211018 [GitHub] [skywalking-swck] hanahmily opened a new pull request #37: Fix vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-18T05:06:13.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://go-review.googlesource.com/c/crypto/+/278852"
        },
        {
          "name": "[skywalking-notifications] 20211018 [GitHub] [skywalking-swck] hanahmily opened a new pull request #37: Fix vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-29652",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1",
              "refsource": "MISC",
              "url": "https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1"
            },
            {
              "name": "https://go-review.googlesource.com/c/crypto/+/278852",
              "refsource": "MISC",
              "url": "https://go-review.googlesource.com/c/crypto/+/278852"
            },
            {
              "name": "[skywalking-notifications] 20211018 [GitHub] [skywalking-swck] hanahmily opened a new pull request #37: Fix vulnerabilities",
              "refsource": "MLIST",
              "url": "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-29652",
    "datePublished": "2020-12-17T04:12:17.000Z",
    "dateReserved": "2020-12-09T00:00:00.000Z",
    "dateUpdated": "2024-08-04T16:55:10.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8169 (GCVE-0-2020-8169)

Vulnerability from cvelistv5 – Published: 2020-12-14 19:41 – Updated: 2024-08-04 09:48

Summary

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

Severity

No CVSS data available.

CWE

CWE-200 - Information Disclosure (CWE-200)

Assigner

hackerone

References

5 references

URL	Tags
https://hackerone.com/reports/874778	x_refsource_MISC
https://curl.se/docs/CVE-2020-8169.html	x_refsource_MISC
https://www.debian.org/security/2021/dsa-4881	vendor-advisoryx_refsource_DEBIAN
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	https://github.com/curl/curl	Affected: libcurl 7.62.0 to and including 7.70.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T09:48:25.642Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://hackerone.com/reports/874778"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://curl.se/docs/CVE-2020-8169.html"
          },
          {
            "name": "DSA-4881",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2021/dsa-4881"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "https://github.com/curl/curl",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "libcurl 7.62.0 to and including 7.70.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "Information Disclosure (CWE-200)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-03-08T14:07:55.000Z",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://hackerone.com/reports/874778"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://curl.se/docs/CVE-2020-8169.html"
        },
        {
          "name": "DSA-4881",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2021/dsa-4881"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "support@hackerone.com",
          "ID": "CVE-2020-8169",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "https://github.com/curl/curl",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "libcurl 7.62.0 to and including 7.70.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Information Disclosure (CWE-200)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://hackerone.com/reports/874778",
              "refsource": "MISC",
              "url": "https://hackerone.com/reports/874778"
            },
            {
              "name": "https://curl.se/docs/CVE-2020-8169.html",
              "refsource": "MISC",
              "url": "https://curl.se/docs/CVE-2020-8169.html"
            },
            {
              "name": "DSA-4881",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2021/dsa-4881"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-200951.pdf"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2020-8169",
    "datePublished": "2020-12-14T19:41:54.000Z",
    "dateReserved": "2020-01-28T00:00:00.000Z",
    "dateUpdated": "2024-08-04T09:48:25.642Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2023-2229

CVE-2013-7489 (GCVE-0-2013-7489)

CVE-2018-10237 (GCVE-0-2018-10237)

CVE-2018-20225 (GCVE-0-2018-20225)

CVE-2019-20454 (GCVE-0-2019-20454)

CVE-2019-20838 (GCVE-0-2019-20838)

CVE-2020-14155 (GCVE-0-2020-14155)

CVE-2020-28469 (GCVE-0-2020-28469)

CVE-2020-28851 (GCVE-0-2020-28851)

CVE-2020-29652 (GCVE-0-2020-29652)

CVE-2020-8169 (GCVE-0-2020-8169)

Tags

Sightings

Nomenclature