Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-43537 State: PUBLISHED Published: 2023-01-03T20:04:49.995Z Last Updated: 2025-04-10T15:21:42.071Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Problem Types: n/a Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.1
CVE ID: CVE-2022-43538 State: PUBLISHED Published: 2023-01-03T20:05:57.678Z Last Updated: 2025-04-10T15:21:09.607Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Problem Types: n/a Description: Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.1
CVE ID: CVE-2022-43539 State: PUBLISHED Published: 2023-01-03T20:07:05.704Z Last Updated: 2025-04-10T15:20:37.429Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Problem Types: n/a Description: A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a privileged user on the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): C
zed actions as a privileged user on the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-020.txt
CVE ID: CVE-2022-43540 State: PUBLISHED Published: 2023-01-03T20:08:16.019Z Last Updated: 2025-04-10T14:56:48.783Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba ClearPass Policy Manager Problem Types: n/a Description: A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that is of a sensitive nature in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x:
arPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-020.txt
CVE ID: CVE-2022-43541 State: PUBLISHED Published: 2022-11-30T19:27:55.849Z Last Updated: 2025-04-24T14:43:35.948Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Problem Types: n/a Description: Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; E
CVE ID: CVE-2022-43542 State: PUBLISHED Published: 2022-11-30T19:29:10.032Z Last Updated: 2025-04-24T14:42:39.570Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Hewlett Packard Enterprise (HPE) Products: Aruba EdgeConnect Enterprise Software Problem Types: n/a Description: Vulnerabilities in the Aruba EdgeConnect Enterprise command line interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; E
CVE ID: CVE-2022-43543 State: PUBLISHED Published: 2022-12-21T00:00:00.000Z Last Updated: 2025-04-16T17:36:43.679Z Vendors: KDDI CORPORATION, NTT DOCOMO, INC., and SoftBank Corp. Products: KDDI +Message App for Android and for iOS, NTT DOCOMO +Message App for Android and for iOS, and SoftBank +Message App for Android and for iOS Problem Types: User Interface (UI) Misrepresentation of Critical Information Description: KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode con
ge App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links. As a result, a spoofed URL may be displayed and phishing attacks may be conducted. Affected products and versions are as follows: KDDI +Message App for Android prior to version 3.9.2 and +Message App for iOS prior to version 3.9.4, NTT DOCOMO +Message App for Android prior to version 54.49.0500 and +Message App for iOS prior to version 3.9.4, and SoftBank +Message App for Android prior to version 12.9.5 and +Message App for iOS prior to version 3.9.4 Additional Analyst Notes: - CVE
App for Android prior to version 12.9.5 and +Message App for iOS prior to version 3.9.4 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.au.com/mobile/service/plus-message/information/ - https://www.docomo.ne.jp/service/plus_message/ - https://www.softbank.jp/mobile/service/plus-message/ - https://jvn.jp/en/jp/JVN43561812/index.html
CVE ID: CVE-2022-43545 State: PUBLISHED Published: 2022-11-08T00:00:00 Last Updated: 2024-08-03T13:32:59.727Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: POWER METER SICAM Q100, SICAM P850, SICAM P855 Problem Types: CWE-20 Description: A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions
10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the RecordType-paramete
versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the RecordType-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
CVE ID: CVE-2022-43546 State: PUBLISHED Published: 2022-11-08T00:00:00 Last Updated: 2024-10-21T16:08:33.311Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: POWER METER SICAM Q100, SICAM P850, SICAM P855 Problem Types: CWE-20 Description: A vulnerability has been identified in POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), POWER METER SICAM Q100 (All versions < V2.50), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions < V3.10), SICAM P850 (All versions
10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the EndTime-parameter i
versions < V3.10), SICAM P855 (All versions < V3.10). Affected devices do not properly validate the EndTime-parameter in requests to the web interface on port 443/tcp. This could allow an authenticated remote attacker to crash the device (followed by an automatic reboot) or to execute arbitrary code on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-887249.pdf
CVE ID: CVE-2022-43548 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-30T05:55:04.408Z Vendors: NodeJS Products: Node Problem Types: CWE-78 Description: A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.The fix for this issue in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32212 was incomplete and this new CVE is to complete the fix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
te and this new CVE is to complete the fix. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nodejs.org/en/blog/vulnerability/november-2022-security-releases/ - https://security.netapp.com/advisory/ntap-20230120-0004/ - https://www.debian.org/security/2023/dsa-5326 - https://lists.debian.org/debian-lts-announce/2023/02/msg00038.html - https://security.netapp.com/advisory/ntap-20230427-0007/
CVE ID: CVE-2022-43549 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:01:35.345Z Vendors: n/a Products: Veeam Backup for Google Cloud Problem Types: CWE-287 Description: Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.veeam.com/kb4374
CVE ID: CVE-2022-43550 State: PUBLISHED Published: 2023-02-09T00:00:00.000Z Last Updated: 2025-03-25T13:44:45.295Z Vendors: n/a Products: https://github.com/jitsi Problem Types: CWE-78 Description: A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow an attacker to insert an arbitrary URL which opens up the opportunity to remote execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/jitsi/jitsi/commit/8aa7be58522f4264078d54752aae5483bfd854b2
CVE ID: CVE-2022-43551 State: PUBLISHED Published: 2022-12-23T00:00:00.000Z Last Updated: 2025-02-13T16:33:28.755Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-319 Description: A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) inst
to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1755083 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TVWZW5CNSJ7UYAF2BGSYAWAEXDJYUBHA/ - https://security.netapp.com/advisory/ntap-20230427-0007/ - https://security.gentoo.org/glsa/202310-12
CVE ID: CVE-2022-43552 State: PUBLISHED Published: 2023-02-09T00:00:00 Last Updated: 2024-10-27T14:48:12.558Z Vendors: n/a Products: https://github.com/curl/curl Problem Types: CWE-416 Description: A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hackerone.com/reports/1764858 -
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://hackerone.com/reports/1764858 - https://security.netapp.com/advisory/ntap-20230214-0002/ - https://support.apple.com/kb/HT213670 - http://seclists.org/fulldisclosure/2023/Mar/17 - https://security.gentoo.org/glsa/202310-12
CVE ID: CVE-2022-43553 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T14:00:28.595Z Vendors: n/a Products: EdgeMAX EdgeRouter Problem Types: CWE-250 Description: A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.ui.com/releases/Security-Advisory-Bulletin-026-026/07697c65-30b3-4c06-a158-35e06534480d
CVE ID: CVE-2022-43554 State: PUBLISHED Published: 2023-11-03T18:13:19.970Z Last Updated: 2024-09-05T19:16:03.381Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: Ivanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.1.236_release_notes.txt
CVE ID: CVE-2022-43555 State: PUBLISHED Published: 2023-11-03T18:13:19.919Z Last Updated: 2024-09-04T20:01:58.689Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ivanti Products: Avalanche Description: Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.wavelink.com/Files/avalanche_v6.4.1.236_release_notes.txt
CVE ID: CVE-2022-43556 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-24T13:59:08.743Z Vendors: n/a Products: https://github.com/concretecms/concretecms Problem Types: CWE-79 Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field since the result dashboard page output is not sanitized. The Concrete CMS security team has ranked this 4.2 with CVSS v3.1 vector AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N Thanks @_akbar_jafarli_ for reporting. Remediate by updating to Concrete CMS 8.5.10 and Concrete CMS 9.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
.5.10 and Concrete CMS 9.1.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes - https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes - https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31
CVE ID: CVE-2022-43557 State: PUBLISHED Published: 2022-12-05T00:00:00.000Z Last Updated: 2025-04-23T15:47:10.734Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Becton, Dickinson and Company (BD) Products: BodyGuard™ Pump Problem Types: CWE-1299 Description: The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump. Additional Anal
, protected health information (PHI) or personally identifiable information (PII) is stored in the pump. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-bodyguard-pumps-rs-232-interface-vulnerability
CVE ID: CVE-2022-43561 State: PUBLISHED Published: 2022-11-03T22:06:41.735Z Last Updated: 2025-04-25T19:10:23.182Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-79 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role can store arbitrary scripts that can lead to persistent cross-site scripting (XSS). The vulnerability affects instances with Splunk Web enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1101.html - https:
ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1101.html - https://research.splunk.com/application/a974d1ee-ddca-4837-b6ad-d55a8a239c20/
CVE ID: CVE-2022-43562 State: PUBLISHED Published: 2022-11-04T22:19:11.815Z Last Updated: 2025-05-05T20:37:25.294Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-20 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host header, which could let a remote authenticated user conduct various attacks against the system, including cross-site scripting and cache poisoning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1102
tainer: - CISA ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1102.html
CVE ID: CVE-2022-43563 State: PUBLISHED Published: 2022-11-04T22:19:55.669Z Last Updated: 2025-05-05T20:36:39.876Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-20 Description: In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will. Addit
icking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1103.html
CVE ID: CVE-2022-43564 State: PUBLISHED Published: 2022-11-04T22:20:36.543Z Last Updated: 2025-05-01T20:22:37.435Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-400 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule search reports can cause a denial of service through the use of specially crafted search macros. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1104.html
CVE ID: CVE-2022-43565 State: PUBLISHED Published: 2022-11-04T22:20:55.783Z Last Updated: 2025-05-05T20:35:48.097Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-20 Description: In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the ‘tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. Additional Analyst Notes: - CVE Program C
sh the victim by tricking them into initiating a request within their browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1105.html
CVE ID: CVE-2022-43566 State: PUBLISHED Published: 2022-11-04T22:21:21.337Z Last Updated: 2025-05-05T20:34:58.924Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-20 Description: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards in the Analytics Workspace. The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The atta
lity requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-1106.html - https://research.splunk.com/application/b6d77c6c-f011-4b03-8650-8f10edb7c4a8/