CVE-2022-43569
Persistent Cross-Site Scripting via a Data Model object name in Splunk Enterprise
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scripts that can lead to persistent cross-site scripting (XSS) in the object name of a Data Model.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Splunk · Splunk Enterprise¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →