cve.bz

CVE-2023-40597

8.8 highEPSS 0.2%

High (8.8) in splunk. EPSS 0.2% chance of exploitation in the next 30 days.

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.

Severity

CVSS 3.1

8.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWEs
CWE-22, CWE-36
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON