CVE-2023-32713

CRITICAL Year: 2023
CVSS v3 Score
9.9
Critical
Weakness Type
CWE-269
View all →

Vulnerability Description

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.

Related Vulnerabilities

CVE-2020-15149

CRITICAL
CVSS:9.9(Critical)

NodeBB before version 1.14.3 has a bug introduced in version 1.12.2 in the validation logic that makes it possible to change the password of any user on a running NodeBB forum by sending a specially c...

CWE-2692020

CVE-2020-7047

CRITICAL
CVSS:9.9(Critical)

The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users r...

CWE-2692020

CVE-2021-36302

CRITICAL
CVSS:9.9(Critical)

All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit ...

CWE-2692021

CVE-2022-1770

CRITICAL
CVSS:9.9(Critical)

Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2.

CWE-2692022

CVE-2022-39395

CRITICAL
CVSS:9.9(Critical)

Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. In Vela Server and Vela Worker prior to version 0.16.0 and Vela UI prior to version 0.17.0, some ...

CWE-2692022

CVE-2023-20048

CRITICAL
CVSS:9.9(Critical)

A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands o...

CWE-2692023