High severity8.8NVD Advisory· Published Nov 4, 2022· Updated Jun 17, 2026

CVE-2022-43568

Description

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Splunk/Splunk Enterprisecpe-rescue2 versions
8.1+ 1 more
- (no CPE)range: 8.1
- (no CPE)range: <8.1.12, <8.2.9, <9.0.2
Splunk/Splunk
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
Range: >=8.1.0,<8.1.12
Splunk/Splunk Cloud Platform
cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*
Range: <9.0.2205

Patches

Vulnerability mechanics

References

research.splunk.com/application/d532d105-c63f-4049-a8c4-e249127ca425/nvdExploitVendor Advisory
www.splunk.com/en_us/product-security/announcements/svd-2022-1108.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.034
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000