EUVD-2022-53391

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Dashboards in Splunk before version 9.0 allow risky command injection via cross-origin requests.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-32154	14 Jun 202211:55	–	attackerkb
Circl	CVE-2022-32154	15 Jun 202220:20	–	circl
CNNVD	Splunk 命令注入漏洞	15 Jun 202200:00	–	cnnvd
CNVD	Splunk Command Injection Vulnerability	24 Jun 202200:00	–	cnvd
CVE	CVE-2022-32154	15 Jun 202216:48	–	cve
Cvelist	CVE-2022-32154 Risky commands warnings in Splunk Enterprise Dashboards	15 Jun 202216:48	–	cvelist
NCSC	Vulnerabilities fixed in Splunk products	16 Jun 202200:00	–	ncsc
NVD	CVE-2022-32154	15 Jun 202217:15	–	nvd
Prion	Design/Logic Flaw	15 Jun 202217:15	–	prion
Tenable Nessus	Splunk Enterprise < 9.0 Multiple Vulnerabilities	11 Aug 202200:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "7f34ac3e-c1f6-34a3-b3e1-4887bf2f088a",
        "vendor": {
          "name": "Splunk, Inc"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "43495b8d-eda0-3b08-8420-d8186ce9f708",
        "product": {
          "name": "Splunk Enterprise"
        },
        "product_version": "9.0 <9.0"
      },
      {
        "id": "bb47c2dc-8c01-3547-a7c2-216437955a01",
        "product": {
          "name": "Splunk Cloud Platform"
        },
        "product_version": "8.2 <8.2.2106"
      }
    ]
  }
]

Source	Link
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates
splunk	www.splunk.com/en_us/product-security/announcements/svd-2022-0604.html
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/SPLsafeguards
research	www.research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_commands/
research	www.research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_spl_mltk/
research	www.research.splunk.com/application/splunk_command_and_scripting_interpreter_delete_usage/

03 Oct 2025 20:07Current

8.1High risk

Vulners AI Score8.1

CVSS 3.16.8 - 8.1

CVSS 24

EPSS0.00292