[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHmcoFrPd2xFdWA_y4JlhidjVSIoP8NfZnZm6AKUN-zw":3,"g5a-risk:CVE-2024-36987":124},{"success":4,"data":5,"meta":121},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":51,"references":52,"referencesCount":51,"weaknesses":60,"weaknessesCount":69,"isActivelyExploited":70,"cisaInfo":28,"otxData":28,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":119,"notableEvents":120},"CVE-2024-36987","What is CVE-2024-36987?","In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who does not hold the admin or power Splunk roles could upload a file with an arbitrary extension using the indexing\u002Fpreview REST endpoint.","In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200, an authenticated, low-privileged user who...","2024-07-01T17:15:07.12","2026-06-17T07:37:33.04",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"prodsec@splunk.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","NETWORK","LOW","NONE","UNCHANGED",4.3,"MEDIUM",null,2.8,1.4,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":35,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"HIGH",3.6,[],[],[],0.00291,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"splunk","cloud","*","cpe:2.3:a:splunk:cloud:*:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":47,"criteria":50,"vulnerable":4},"cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",2,[53,58],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fadvisory.splunk.com\u002Fadvisories\u002FSVD-2024-0707","Splunk",[57],"Vendor Advisory",{"url":54,"source":55,"tags":59},[57],[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","","Draft","Base","Simple",1,false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2024-36987? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-36987, a medium severity cyber security vulnerability from 2024. In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0...","CVE-2024-36987, CVE-2024-36987 vulnerability, CVE-2024-36987 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, splunk security, cloud vulnerability, splunk vulnerability","\u002Fwhat-is\u002Fcve-2024-36987",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-36987","Cybersecurity","CVE-2024-36987, CVE-2024-36987 vulnerability, CVE-2024-36987 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":28,"Negate":28,"Nodes":99},[100],{"Operator":101,"Negate":70,"CPEMatch":102},"OR",[103,107,111,115],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":104,"VersionStartExcluding":28,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":28},"D906AB2D-B882-4482-9A3B-53A01A28152A","9.1.2312","9.1.2312.200",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":108,"VersionStartExcluding":28,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":28},"09264EE5-FA8A-49C5-AB1F-AEAC16CDC591","9.0.0","9.0.10",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":112,"VersionStartExcluding":28,"VersionStartIncluding":113,"VersionEndExcluding":114,"VersionEndIncluding":28},"565039EE-74F6-451C-AFB3-F6C9F7AA0EEE","9.1.0","9.1.5",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":116,"VersionStartExcluding":28,"VersionStartIncluding":117,"VersionEndExcluding":118,"VersionEndIncluding":28},"B1342052-4733-49BB-95F0-A89B07A3F2E3","9.2.0","9.2.2",[],[],{"lastModified":11,"cacheTime":122,"version":123},1792246394419,"2.0",{"score":125,"band":126,"action":127,"scoredAt":128},22,"Low","Monitor","2026-10-16T07:03:01.809893+00:00"]