Splunk security advisories, June 2022

Every Splunk security advisory published in June 2022, from Splunk Security Advisories (advisory.splunk.com) + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 7
Critical: 1
High: 5
In CISA KEV: 0
CVEs: 7

Splunk advisories published in June 2022

Jun 15, 2022
Critical [CVE-2022-32158] Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0
Critical9.0
Jun 15, 2022
High [CVE-2022-32157] Splunk Enterprise: Splunk Enterprise deployment servers in versions before 9.0 allow unauthenticated downloading of forwarder bundles.
High7.5
Jun 15, 2022
High [CVE-2022-32156] Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation
High7.4
Jun 15, 2022
High [CVE-2022-32155] Universal Forwarder: In universal forwarder versions before 9.0, management services are available remotely by default.
High7.5
Jun 15, 2022
High [CVE-2022-32153] Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not…
High8.1
Jun 15, 2022
High [CVE-2022-32151] The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the…
High7.4
Jun 15, 2022
Medium [CVE-2022-32154] Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token
Medium6.8

Get an email when Splunk publishes the next one.

See Splunk's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Splunk

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.