Lucene search
SplunkCVELIST:CVE-2022-43564HistoryNov 04, 2022 - 10:20 p.m.
CVE-2022-43564 Denial of Service in Splunk Enterprise through search macros
2022-11-0422:20:36
CWE-400
Splunk
www.cve.org
denial of service
splunk enterprise
search macros
remote user
specially crafted
search reports
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
50.2%
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule search reports can cause a denial of service through the use of specially crafted search macros.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "Splunk Enterprise",
"vendor": "Splunk",
"versions": [
{
"lessThan": "8.1.12",
"status": "affected",
"version": "8.1",
"versionType": "custom"
},
{
"lessThan": "8.2.9",
"status": "affected",
"version": "8.2",
"versionType": "custom"
},
{
"lessThan": "9.0.2",
"status": "affected",
"version": "9.0",
"versionType": "custom"
}
]
}
]Related
nessus
nessus
Splunk Enterprise 8.1 < 8.1.12, 8.2.0 < 8.2.9 (SVD-2022-1104)
2022-11-03 00:00:00
prion
prion
Code injection
2022-11-04 23:15:00
nvd
nvd
CVE-2022-43564
2022-11-04 23:15:09
cve
cve
CVE-2022-43564
2022-11-04 23:15:09
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
50.2%
Related for CVELIST:CVE-2022-43564