CVE2023

CVE-2023-46214

2Rules

3References

1Folders

2023-11-27Latest

Summary

CVE-2023-46214 is tracked here through 2 Sigma detections for exploitation attempts and related post-exploitation behavior observed in 2023. Coverage centers on webserver.

Related Detections

Search this threat

hightestEmerging Threat

Exploitation Attempt Of CVE-2023-46214 Using Public POC Code

Detects exploitation attempt of CVE-2023-46214, a remote code execution (RCE) in Splunk Enterprise through insecure XML parsing using known public proof of concept code

Generalwebserver

2023-11-27

mediumtestEmerging Threat

Potential CVE-2023-46214 Exploitation Attempt

Detects potential exploitation of CVE-2023-46214, a remote code execution (RCE) in Splunk Enterprise through insecure XML parsing

Generalwebserver

2023-11-27

References