Splunk App For Lookup File Editing vulnerabilities

3 CVEs affecting Splunk App For Lookup File Editing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20233, published 2025-03-26.

More from Splunk.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-32714, published 2023-06-01. High severity, CVSS 8.1. EPSS: 42.8% chance of exploitation in the next 30 days. In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and…
• CVE-2023-32715, published 2023-06-01. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. In the Splunk App for Lookup File Editing versions below 4.0.1, a user can insert potentially malicious JavaScript code into the app, which causes that code to run on the user’s machine. The app…
• CVE-2025-20233, published 2025-03-26. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the `chmod` and `makedirs` Python functions in a way that resulted in overly broad read and execute…