CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.3. Exploitation may require the attacker to be authenticated.
CVE
CVE-2023-22936
Severity
MEDIUM
CVSS
6.3
EPSS
0.38%
Original NVD Description
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF) by an authenticated user. The initiator of the request cannot see the response without the presence of an additional vulnerability within the environment.
Related CVEs
Other vulnerabilities affecting the same vendor(s)