High severity8.8NVD Advisory· Published Nov 4, 2022· Updated Jun 17, 2026
CVE-2022-43567
CVE-2022-43567
Description
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5<8.2.9, <8.1.12, <9.0.2+ 1 more
- (no CPE)range: <8.2.9, <8.1.12, <9.0.2
- (no CPE)range: 8.1
- Range: <8.2.9, <8.1.12, <9.0.2
Patches
Vulnerability mechanics
References
2- research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/nvdExploitVendor Advisory
- www.splunk.com/en_us/product-security/announcements/svd-2022-1107.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.