CVE-2024-36991 Scanner
CVE-2024-36991 scanner - Local File Inclusion (LFI) vulnerability in Splunk Enterprise
Used 2.8k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-36991
7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
splunk enterprisesplunk
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: splunk enterprise
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →