HIGH Published July 1, 2024

CVE-2024-36984

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially crafted query that they could then use to serialize untrusted data. The attacker could use the query to execute arbitrary code.

CVSS base score

8.8 (v3.1)

Severity

HIGH

Attack vector

Network

Weakness

CWE-502

Last modified

November 4, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

splunk splunk

References

advisory.splunk.com Vendor Advisory
research.splunk.com Tool Signature
advisory.splunk.com Vendor Advisory
research.splunk.com Tool Signature

View full NVD advisory →

More splunk vulnerabilities

Published the same day

← Back to CVE watch

CVE-2024-36984

Affected products

References

More splunk vulnerabilities

Published the same day

Related reading