CVE-2024-22164: splunk enterprise_security Uncontrolled Resource Consumption
Vulnerability summary
CVE-2024-22164 is a medium (CVSS 4.3) Uncontrolled Resource Consumption vulnerability in splunk enterprise_security. EPSS estimates a 0.46% chance of exploitation in the next 30 days, higher than 38.3% of scored vulnerabilities.
Timeline
- 09-01-2024PublishedVulnerability first disclosed.
- 03-06-2025Last modifiedVulnerability information updated.
Description
In Splunk Enterprise Security (ES) versions below 7.1.2, an attacker can use investigation attachments to perform a denial of service (DoS) to the Investigation. The attachment endpoint does not properly limit the size of the request which lets an attacker cause the Investigation to become inaccessible.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST4.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
EPSS trend
Probability
0.46%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
0.00 pp
From 0.46% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.
- CWE-770Allocation of Resources Without Limits or ThrottlingThe product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Affected systems
Splunk2 products
- enterprise_security≥ 7.1.0, < 7.1.2
- splunk enterprise security (es)≥ 7.3, < 7.3.0 | ≥ 7.2, < 7.2.0 | ≥ 7.1, < 7.1.2
1 vendor · 2 products
References
2 links- advisory.splunk.com/advisories/SVD-2024-0101Vendor Advisory