CVE-2025-0367CWE-1333

Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)

Medium · published January 30, 2025

CVSS v3.1
6.5
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00510 · 42.6th percentile
Weakness
CWE-1333 · Inefficient Regular Expression Complexity
Published
2025-01-30T17:04Z
EPSS history
Timeline
  • 30 JAN 17:04Z
    Regular Expression Denial of Service (ReDoS) in Splunk Supporting Add-on for Active Directory (SA-ldapsearch)
    cvelistv5