Splunk it service intelligence vulnerabilities

Latest Splunk it service intelligence CVEs

Newest publication first

1. CVE-2023-4571 Unauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)

   Published 2023-08-30

   High·CVSS 8.6 EPSS 0.25%

   In Splunk IT Service Intelligence (ITSI) versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute (ANSI) escape codes into Splunk ITSI log files that, when a vulnerable terminal application reads them, can run malicious co...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.