Security Advisory

CVE-2022-43570

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-11-04 22:22:50

Last updated 2025-05-05 20:30:12

Assigner Splunk

CVSS score 8.8

State PUBLISHED

Description

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language (XML) external entity (XXE) injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error.

← Browse all CVEs View on cve.org ↗