CVE-2022-43562

🗓️ 04 Nov 2022 22:19:11Reported by SplunkType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 72 Views

Splunk Enterprise <8.1.12, 8.2.9, 9.0.2 allows remote authenticated user to conduct attacks

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-43562	5 May 202521:20	–	circl
CNNVD	Splunk 注入漏洞	2 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-43562 Host Header Injection in Splunk Enterprise	4 Nov 202222:19	–	cvelist
EUVD	EUVD-2022-46558	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Splunk Enterprise	3 Nov 202200:00	–	ncsc
NVD	CVE-2022-43562	4 Nov 202223:15	–	nvd
Prion	Cross site scripting	4 Nov 202223:15	–	prion
Positive Technologies	PT-2022-26965 · Splunk · Splunk Enterprise	4 Nov 202200:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 8.1 < 8.1.12, 8.2.0 < 8.2.9, 9.0.0 < 9.0.2 (SVD-2022-1102)	3 Nov 202200:00	–	nessus
Vulnrichment	CVE-2022-43562 Host Header Injection in Splunk Enterprise	4 Nov 202222:19	–	vulnrichment

NVD

Node

splunk splunkRange8.1.0–8.1.12enterprise

splunk splunkRange8.2.0–8.2.9enterprise

splunk splunkRange9.0.0–9.0.2enterprise

splunk splunk_cloud_platformRange<9.0.2208

[
  {
    "defaultStatus": "affected",
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "lessThan": "8.1.12",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      },
      {
        "lessThan": "8.2.9",
        "status": "affected",
        "version": "8.2",
        "versionType": "custom"
      },
      {
        "lessThan": "9.0.2",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      }
    ]
  }
]