CVE coverage
View on NVD →
CVE-2023-46214
CVSS 8.0
3 detections found
In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk Enterprise instance.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Splunk RCE via User XSLT | production | 2026-05-14 |
| sigma | Potential CVE-2023-46214 Exploitation Attempt | test | 2023-11-27 |
| sigma | Exploitation Attempt Of CVE-2023-46214 Using Public POC Code | test | 2023-11-27 |