Vulnerabilities > Splunk > Enterprise Security

DATE CVE VULNERABILITY TITLE RISK
2024-01-09 CVE-2024-22164 Allocation of Resources Without Limits or Throttling vulnerability in Splunk Enterprise Security 7.1.0/7.1.1
In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation.
network
low complexity
splunk CWE-770
4.3
2024-01-09 CVE-2024-22165 Unspecified vulnerability in Splunk Enterprise Security 7.1.0/7.1.1
In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS).
network
low complexity
splunk
6.5