CVE-2024-36997

8.1 highEPSS 0.5%

High (8.1) in splunk. EPSS 0.5% chance of exploitation in the next 30 days.

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user could store and execute arbitrary JavaScript code in the browser context of another Splunk user through the conf-web/settings REST endpoint. This could potentially cause a persistent cross-site scripting (XSS) exploit.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-07-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk
splunk:splunk_cloud_platform

References

https://advisory.splunk.com/advisories/SVD-2024-0717
https://research.splunk.com/application/ed1209ef-228d-4dab-9856-be9369925a5c
https://advisory.splunk.com/advisories/SVD-2024-0717
https://research.splunk.com/application/ed1209ef-228d-4dab-9856-be9369925a5c

Check your stack JSON