{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T23:06:54.046","vulnerabilities":[{"cve":{"id":"CVE-2022-32154","sourceIdentifier":"prodsec@splunk.com","published":"2022-06-15T17:15:09.017","lastModified":"2026-06-17T04:46:46.650","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is used in a query in a cross-origin request. The result bypasses SPL safeguards for risky commands. See New capabilities can limit access to some custom and potentially risky commands (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/SPLsafeguards#New_capabilities_can_limit_access_to_some_custom_and_potentially_risky_commands) for more information. Note that the attack is browser-based and an attacker cannot exploit it at will."},{"lang":"es","value":"Los cuadros de mando en Splunk Enterprise versiones anteriores a 9.0, podrían permitir a un atacante inyectar comandos de búsqueda arriesgados en un token de formulario cuando el token es usado en una consulta en una petición de origen cruzado. El resultado es una omisión de las salvaguardas de SPL para los comandos de riesgo. Véase Las nuevas capacidades pueden limitar el acceso a algunos comandos personalizados y potencialmente arriesgados (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/SPLsafeguards#New_capabilities_can_limit_access_to_some_custom_and_potentially_risky_commands) para más información. Tenga en cuenta que el ataque está basado en el navegador y un atacante no puede explotarlo a voluntad"}],"affected":[{"source":"prodsec@splunk.com","affectedData":[{"vendor":"Splunk, Inc","product":"Splunk Enterprise","versions":[{"version":"9.0","lessThan":"9.0","versionType":"custom","status":"affected"}]},{"vendor":"Splunk, Inc","product":"Splunk Cloud Platform","versions":[{"version":"8.2","lessThan":"8.2.2106","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"prodsec@splunk.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","baseScore":6.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":5.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"prodsec@splunk.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*","versionEndExcluding":"9.0","matchCriteriaId":"A6CE3B90-F8EF-4DC2-80FF-2B791F152037"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*","versionEndExcluding":"8.2.2106","matchCriteriaId":"87852670-65F6-4EE8-ABD5-BC25137868DD"}]}]}],"references":[{"url":"https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/SPLsafeguards#New_capabilities_can_limit_access_to_some_custom_and_potentially_risky_commands","source":"prodsec@splunk.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates","source":"prodsec@splunk.com","tags":["Release Notes","Vendor Advisory"]},{"url":"https://research.splunk.com/application/splunk_command_and_scripting_interpreter_delete_usage/","source":"prodsec@splunk.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_commands/","source":"prodsec@splunk.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_spl_mltk/","source":"prodsec@splunk.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.splunk.com/en_us/product-security/announcements/svd-2022-0604.html","source":"prodsec@splunk.com","tags":["Vendor Advisory"]},{"url":"https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/SPLsafeguards#New_capabilities_can_limit_access_to_some_custom_and_potentially_risky_commands","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"]},{"url":"https://research.splunk.com/application/splunk_command_and_scripting_interpreter_delete_usage/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_commands/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://research.splunk.com/application/splunk_command_and_scripting_interpreter_risky_spl_mltk/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.splunk.com/en_us/product-security/announcements/svd-2022-0604.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}