CNNVD-202507-757 Information
CNNVD ID
CNNVD-202507-757
Related CVE
- CNNVD Published: 2025-07-07
Description (Chinese)
Splunk Cloud Platform和Splunk Enterprise都是美国Splunk公司的产品。Splunk Cloud Platform是一个强大的数据收集、处理和分析服务。Splunk Enterprise是一套数据收集分析软件。 Splunk Cloud Platform和Splunk Enterprise存在跨站请求伪造漏洞，该漏洞源于跨站请求伪造，可能导致拒绝服务。以下产品及版本受到影响:Splunk Enterprise 9.4.3、9.3.5、9.2.7和9.1.10之前版本和Splunk Cloud Platform 9.3.2411.104、9.3.2408.113和9.2.2406.119之前版本。
Description (English)
Splunk Cloud Platform and Splunk Enterprise are products of the United States company Splunk. Splung Cloud Platform is a powerful data collection, processing and analysis service. Splung Enterprise is a data collection and analysis software. Splung Cloud Platform and Splunk Enterprise had a false gap in cross-site requests, which originated in cross-site requests for forgery and could lead to the denial of services. The following products and versions were affected: Splung Enterprise 9.4.3, 9.3.5, 9.2.7 and 9.1.10, pre-Splunk Cloud Platform 9.3.2411.104, 9.3.2408.113 and 9.2.2406.119.
Hazard Level
High
Vulnerability Type
跨站请求伪造
Affected Vendor
视博网讯
Published
2025-07-07
Last Modified
2026-02-24
References
https://advisory.splunk.com/advisories/SVD-2025-0705
Patch
https://advisory.splunk.com/advisories/SVD-2025-0705
Share on: