CVE-2023-32713

9.9 criticalEPSS 0.3%

Critical (9.9) in splunk splunk app for stream. EPSS 0.3% chance of exploitation in the next 30 days.

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.

Severity

CVSS 3.1

9.9 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2023-06-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk_app_for_stream

References

https://advisory.splunk.com/advisories/SVD-2023-0607
https://advisory.splunk.com/advisories/SVD-2023-0607

Check your stack JSON