cve.bz

CVE-2024-22164

4.3 mediumEPSS 0.5%

Medium (4.3) in splunk enterprise security. EPSS 0.5% chance of exploitation in the next 30 days.

In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.

Severity

CVSS 3.1

4.3 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS
0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWEs
CWE-770, CWE-400
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON