Description
In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user that holds the “power” Splunk role can store arbitrary scripts that can lead to persistent cross-site scripting (XSS). The vulnerability affects instances with Splunk Web enabled.
References (2)
Core 2
Core References
Exploit, Technical Description, Vendor Advisory
https://research.splunk.com/application/a974d1ee-ddca-4837-b6ad-d55a8a239c20/
Scores
CVSS v3
6.4
EPSS
0.0020
EPSS Percentile
41.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-79
Status
published
Products (2)
splunk/splunk
8.1.0 - 8.1.12
splunk/splunk_cloud_platform
< 9.0.2208
Published
Nov 03, 2022
Tracked Since
Feb 18, 2026