{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T04:52:13.412","vulnerabilities":[{"cve":{"id":"CVE-2022-37438","sourceIdentifier":"prodsec@splunk.com","published":"2022-08-16T21:15:13.587","lastModified":"2026-06-17T04:55:06.390","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"In Splunk Enterprise versions in the following table, an authenticated user can craft a dashboard that could potentially leak information (for example, username, email, and real name) about Splunk users, when visited by another user through the drilldown component. The vulnerability requires user access to create and share dashboards using Splunk Web."},{"lang":"es","value":"En las versiones de Splunk Enterprise de la siguiente tabla, un usuario autenticado puede diseñar un panel de control que podría filtrar información (por ejemplo, nombre de usuario, correo electrónico y nombre real) sobre los usuarios de Splunk, cuando es visitado por otro usuario por medio del componente drilldown. La vulnerabilidad requiere el acceso del usuario para crear y compartir cuadros de mando usando Splunk Web."}],"affected":[{"source":"prodsec@splunk.com","affectedData":[{"vendor":"Splunk","product":"Splunk Enterprise","versions":[{"version":"9.0","lessThan":"9.0.1","versionType":"custom","status":"affected"},{"version":"8.2","lessThan":"8.2.7.1","versionType":"custom","status":"affected"},{"version":"8.1","lessThan":"8.1.11","versionType":"custom","status":"affected"}]},{"vendor":"Splunk","product":"Splunk Cloud Platform","versions":[{"version":"unspecified","lessThan":"9.0.2205","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"prodsec@splunk.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","baseScore":2.6,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","baseScore":3.5,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":1.4}]},"weaknesses":[{"source":"prodsec@splunk.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.1.11","matchCriteriaId":"52EBCCF6-0276-4B2C-9068-53864A39265F"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*","versionStartIncluding":"8.2.0","versionEndExcluding":"8.2.7.1","matchCriteriaId":"07E949C3-48BB-4D7F-98A2-B078E7A75F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk:9.0.0:*:*:*:enterprise:*:*:*","matchCriteriaId":"9A6A63F1-B7A3-4D3D-8366-29C38A5B48BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*","versionEndIncluding":"8.2.2203.4","matchCriteriaId":"DB89EDB8-DF51-4A3E-AD64-D688B367B32C"}]}]}],"references":[{"url":"https://research.splunk.com/application/f844c3f6-fd99-43a2-ba24-93e35fe84be6","source":"prodsec@splunk.com","tags":["Vendor Advisory"]},{"url":"https://www.splunk.com/en_us/product-security/announcements/svd-2022-0802.html","source":"prodsec@splunk.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://research.splunk.com/application/f844c3f6-fd99-43a2-ba24-93e35fe84be6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.splunk.com/en_us/product-security/announcements/svd-2022-0802.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}}]}