High severity8.8NVD Advisory· Published Nov 3, 2022· Updated Jun 17, 2026

CVE-2022-43571

Description

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Splunk/Splunk
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
Range: >=8.1.0,<8.1.12
Splunk/Splunk Cloud Platform
cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*
Range: <9.0.2209
Splunk/Splunk Enterprisecpe-rescue2 versions
8.1+ 1 more
- (no CPE)range: 8.1
- (no CPE)range: <8.2.9, <8.1.12, <9.0.2

Patches

Vulnerability mechanics

References

research.splunk.com/application/b06b41d7-9570-4985-8137-0784f582a1b3/nvdExploitVendor Advisory
www.splunk.com/en_us/product-security/announcements/svd-2022-1111.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.011
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000