Splunk security advisories, November 2022

Every Splunk security advisory published in November 2022, from Splunk Security Advisories (advisory.splunk.com) + NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 12
Critical: 0
High: 9
In CISA KEV: 0
CVEs: 12

Splunk advisories published in November 2022

Nov 4, 2022
High [CVE-2022-43572] In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, sending a malformed file through the Splunk-to-Splunk (S2S) or…
High7.5
Nov 4, 2022
High [CVE-2022-43570] In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user
High8.8
Nov 4, 2022
High [CVE-2022-43569] In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scripts
High8.0
Nov 4, 2022
High [CVE-2022-43568] In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting
High8.8
Nov 4, 2022
High [CVE-2022-43567] In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user
High8.8
Nov 4, 2022
High [CVE-2022-43566] In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user
High7.3
Nov 4, 2022
High [CVE-2022-43565] In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON)
High8.1
Nov 4, 2022
High [CVE-2022-43563] In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names
High8.1
Nov 4, 2022
Medium [CVE-2022-43564] In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who
Medium4.9
Nov 4, 2022
Low [CVE-2022-43562] In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host…
Low3.0
Nov 3, 2022
High [CVE-2022-43571] In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user
High8.8
Nov 3, 2022
Medium [CVE-2022-43561] In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role
Medium6.4

Get an email when Splunk publishes the next one.

See Splunk's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Splunk

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.