CVE-2022-43569

MEDIUM 5.4CVE-2022-43569 · Published 04/11/2022 · updated 17/06/2026

In short

CVE-2022-43569 is a MEDIUM (CVSS 5.4) vulnerability affecting splunk (splunk), splunk cloud platform (splunk).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.2% of all vulnerabilities.
Fix: update to 8.1.12, 8.2.9, 9.0.2, 9.0.2209 or later.

Package	Affected versions	Patched versions
splunk splunk	`≥ 8.1.0, < 8.1.12≥ 8.2.0, < 8.2.9≥ 9.0.0, < 9.0.2`	`8.1.128.2.99.0.2`
splunk cloud platform splunk	`< 9.0.2209`	`9.0.2209`

Description

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scripts that can lead to persistent cross-site scripting (XSS) in the object name of a Data Model.

References

research.splunk.com/application/062bff76-5f9c-496e-a386-cb1adcf69871 · Exploit
splunk.com/en_us/product-security/announcements/svd-2022-1109.html · Vendor Advisory

More vulnerabilities in splunk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

splunk

≥ 8.1.0, < 8.1.12≥ 8.2.0, < 8.2.9≥ 9.0.0, < 9.0.2

8.1.128.2.99.0.2

splunk cloud platform

splunk

< 9.0.2209

9.0.2209

More vulnerabilities in splunk

See all →