CVE-2024-22165: splunk enterprise_security Improper Input Validation
Vulnerability summary
CVE-2024-22165 is a medium (CVSS 6.5) Improper Input Validation vulnerability in splunk enterprise_security. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 42.7% of scored vulnerabilities.
Timeline
- 09-01-2024PublishedVulnerability first disclosed.
- 28-02-2025Last modifiedVulnerability information updated.
Description
In Splunk Enterprise Security (ES) versions lower than 7.1.2, an attacker can create a malformed Investigation to perform a denial of service (DoS). The malformed investigation prevents the generation and rendering of the Investigations manager until it is deleted.<br>The vulnerability requires an authenticated session and access to create an Investigation. It only affects the availability of the Investigations manager, but without the manager, the Investigations functionality becomes unusable for most users.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.52%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
0.00 pp
From 0.52% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Splunk2 products
- enterprise_security≥ 7.1.0, < 7.1.2
- splunk enterprise security (es)≥ 7.3, < 7.3.0 | ≥ 7.2, < 7.2.0 | ≥ 7.1, < 7.1.2
1 vendor · 2 products
References
2 links- advisory.splunk.com/advisories/SVD-2024-0102Vendor Advisory