CVE-2022-32158

10.0 criticalEPSS 1.5%

Critical (10.0) in splunk splunk. EPSS 1.5% chance of exploitation in the next 30 days.

Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment clients through the deployment server. An attacker that compromised a Universal Forwarder endpoint could use the vulnerability to execute arbitrary code on all other Universal Forwarder endpoints subscribed to the deployment server.

Severity

CVSS 3.1

10.0 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2022-06-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk

References

https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates
https://www.splunk.com/en_us/product-security/announcements/svd-2022-0608.html
https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates
https://www.splunk.com/en_us/product-security/announcements/svd-2022-0608.html

Check your stack JSON