Vulnerabilities

TI-2022-21348 CVE-2022-43571 · GHSA-fw8h-qc74-r2c2

Remote Code Execution through dashboard PDF generation component in Splunk Enterprise

MEDIUM 58

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.18604 Published 2022-11-03 Fixed in 8.1.12, 8.2.9 +1 CWE-94

TI-2022-21338 CVE-2022-43561 · GHSA-8267-g4r9-6r3v

Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise

MEDIUM 64

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role can store arbitrary scripts that can lead to persistent cross-site scripting (XSS).

CVSS 3.1MEDIUM 6.4 Network High privileges User interaction EPSS 0.00753 Published 2022-11-03 Fixed in 8.1.12, 8.2.9 +1 CWE-79

Vulnerabilities

Filters

Remote Code Execution through dashboard PDF generation component in Splunk Enterprise

Persistent Cross-Site Scripting in “Save Table” Dialog in Splunk Enterprise