CVE-2022-43566

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user’s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards  in the Analytics Workspace. The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will.

• CWE-20
• CWE-20

• https://research.splunk.com/application/b6d77c6c-f011-4b03-8650-8f10edb7c4a8/Exploit, Vendor Advisory
• https://www.splunk.com/en_us/product-security/announcements/svd-2022-1106.htmlVendor Advisory
• https://research.splunk.com/application/b6d77c6c-f011-4b03-8650-8f10edb7c4a8/Exploit, Vendor Advisory
• https://www.splunk.com/en_us/product-security/announcements/svd-2022-1106.htmlVendor Advisory

Published

Nov 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43560Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-43561In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2…4.8
• CVE-2022-43562In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2…5.4
• CVE-2022-43563In Splunk Enterprise versions below 8.2.9 and 8.1.12, the wa…8.8
• CVE-2022-43564In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2…6.5
• CVE-2022-43565In Splunk Enterprise versions below 8.2.9 and 8.1.12, the wa…8.8
• CVE-2022-43567In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2…8.8
• CVE-2022-43568In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2…6.1
• CVE-2022-43569In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2…5.4
• CVE-2022-4357The LetsRecover WordPress plugin before 1.2.0 does not prope…9.8
• CVE-2022-43570In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2…6.5
• CVE-2022-43571In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2…8.8