CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2022-43567
High (8.8) in splunk. EPSS 1.3% chance of exploitation in the next 30 days.
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-502
- Published
- Modified
- Record from
- the NVD, synced
Affected
- splunk:splunk
- splunk:splunk_cloud_platform
References
- https://research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/
- https://www.splunk.com/en_us/product-security/announcements/svd-2022-1107.html
- https://research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/
- https://www.splunk.com/en_us/product-security/announcements/svd-2022-1107.html