← Database

CVE-2022-43562

LOW CVSS: 3.0 Published: 2022-11-04 Modified: 2026-06-17

Description

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host header, which could let a remote authenticated user conduct various attacks against the system, including cross-site scripting and cache poisoning.

Affected Platforms

Splunk Splunk Cloud PlatformSplunk Splunk

Weakness Type

CWE-20, CWE-74

References