Exploitation Attempt Of CVE-2023-46214 Using Public POC Code — Detection Rule

Detects exploitation attempt of CVE-2023-46214, a remote code execution (RCE) in Splunk Enterprise through insecure XML parsing using known public proof of concept code

Read the full analysis on IntelFusions