Servers and applications
CVE-2023-46213
In Splunk Enterprise versions below 9.0.7 and 9.1.2, ineffective escaping in the “Show syntax Highlighted” feature can result in the execution of unauthorized code in a user’s web browser.
- Severity
- Medium 4.8
- Published
- 16 Nov 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.0.7, 9.1.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk |
|