EUVD-2022-53390

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Splunk Enterprise versions before 9.0 lacked TLS certificate validation by default, possible attack risk.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-32153	14 Jun 202211:55	–	attackerkb
CNNVD	Splunk 信任管理问题漏洞	15 Jun 202200:00	–	cnnvd
CVE	CVE-2022-32153	15 Jun 202216:48	–	cve
Cvelist	CVE-2022-32153 Splunk Enterprise lacked TLS host name validation	15 Jun 202216:48	–	cvelist
NCSC	Vulnerabilities fixed in Splunk products	16 Jun 202200:00	–	ncsc
NVD	CVE-2022-32153	15 Jun 202217:15	–	nvd
Prion	Design/Logic Flaw	15 Jun 202217:15	–	prion
Tenable Nessus	Splunk Enterprise < 9.0 Multiple Vulnerabilities	11 Aug 202200:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "8fa9f220-5005-3d93-aaaf-f2860d411c1a",
        "vendor": {
          "name": "Splunk, Inc"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1744a262-493e-3ad3-9c1d-f52c6d502c33",
        "product": {
          "name": "Splunk Enterprise"
        },
        "product_version": "9.0 <9.0"
      },
      {
        "id": "f23a9ef8-7b8c-3836-9839-b94651009c89",
        "product": {
          "name": "Splunk Cloud Platform"
        },
        "product_version": "8.2 <8.2.2203"
      }
    ]
  }
]

Source	Link
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates
research	www.research.splunk.com/application/splunk_digital_certificates_infrastructure_version/
research	www.research.splunk.com/application/splunk_digital_certificates_lack_of_encryption/
research	www.research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_selfsigned/
research	www.research.splunk.com/network/splunk_identified_ssl_tls_certificates/
splunk	www.splunk.com/en_us/product-security/announcements/svd-2022-0603.html

03 Oct 2025 20:07Current

8.1High risk

Vulners AI Score8.1

CVSS 3.18.1

CVSS 26.8

EPSS0.00296