← Back to CVE List

CVE-2022-43570

Published: 2022-11-04T23:15Z
Last Modified: 2024-11-21T07:26Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can perform an extensible markup language (XML) external entity (XXE) injection via a custom View. The XXE injection causes Splunk Web to embed incorrect documents into an error. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt