Lucene search
PRIOn knowledge basePRION:CVE-2022-43561HistoryNov 03, 2022 - 11:15 p.m.
Cross site scripting
2022-11-0323:15:00
PRIOn knowledge base
www.prio-n.com
2
splunk
enterprise
vulnerability
cross-site scripting
xss
remote user
power role
arbitrary scripts
persistent
splunk web
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role can store arbitrary scripts that can lead to persistent cross-site scripting (XSS). The vulnerability affects instances with Splunk Web enabled.
Related
cve
cve
CVE-2022-43561
2022-11-03 23:15:15
cvelist
cvelist
nvd
nvd
CVE-2022-43561
2022-11-03 23:15:15
nessus
nessus
Splunk Enterprise 8.1 < 8.1.12, 8.2.0 < 8.2.9, 9.0.0 < 9.0.2 (SVD-2022-1101)
2022-11-03 00:00:00