What’s Vulnerable › Vulnerabilities
CVE-2024-53246: Sensitive Information Disclosure through SPL commands
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-10 · updated 2026-06-17
- Weakness: CWE-319
Description
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, such as a Risky Commands Bypass, for successful exploitation.
Affected products
- Splunk Enterprise: from 9.1.0 before 9.1.7; from 9.2.0 before 9.2.4; from 9.3.0 before 9.3.2 — fixed in 9.1.7, 9.2.4, 9.3.2
- Splunk Cloud Platform: from 9.1.2312 before 9.1.2312.206; from 9.2.2403 before 9.2.2403.111; from 9.2.2406 before 9.2.2406.106; from 9.3.2408 before 9.3.2408.101 — fixed in 9.1.2312.206, 9.2.2403.111, 9.2.2406.106, 9.3.2408.101
How to fix
Upgrade to a fixed version: Splunk Enterprise 9.1.7, 9.2.4, 9.3.2; Splunk Cloud Platform 9.1.2312.206, 9.2.2403.111, 9.2.2406.106, 9.3.2408.101. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-53246 or the next vulnerability affects your stack