Unrated severityNVD Advisory· Published Nov 4, 2022· Updated May 5, 2025

Remote Code Execution via the Splunk Secure Gateway application Mobile Alerts feature

CVE-2022-43567

Description

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Splunk/Splunk Enterprisellm-fuzzy2 versions
below 8.2.9, 8.1.12, and 9.0.2+ 1 more
- (no CPE)range: below 8.2.9, 8.1.12, and 9.0.2
- (no CPE)range: 8.1
Splunk/Splunk Secure Gatewayllm-fuzzy

Patches

Vulnerability mechanics

References

research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/mitre
www.splunk.com/en_us/product-security/announcements/svd-2022-1107.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000