In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance.
Metrics
Affected Vendors & Products
Advisories
Source | ID | Title |
---|---|---|
![]() |
EUVD-2023-27040 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instance. The endpoint is now restricted to the ‘splunk-system-user’ account on the local instance. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
Link | Providers |
---|---|
https://advisory.splunk.com/advisories/SVD-2023-0208 |
![]() ![]() |
History
Wed, 19 Mar 2025 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: Splunk
Published:
Updated: 2025-03-19T18:53:03.165Z
Reserved: 2023-01-10T21:39:55.584Z
Link: CVE-2023-22938

Updated: 2024-08-02T10:20:31.381Z

Status : Modified
Published: 2023-02-14T18:15:12.617
Modified: 2024-11-21T07:45:40.823
Link: CVE-2023-22938

No data.

No data.