Skip to content
OpenAdvisories
Medium · 4.9 CVE-2022-43564 EUVD-2022-46560GHSA-f5r5-hq5j-gmjr

Denial of Service in Splunk Enterprise through search macros

Published Nov 4, 2022 · Updated May 1, 2025 · Assigned by Splunk

Description

In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a remote user who can create search macros and schedule search reports can cause a denial of service through the use of specially crafted search macros.

Affected products

VendorProductAffectedFixed
Splunk Splunk Enterprise 8.1 – < 8.1.12, 8.2 – < 8.2.9, 9.0 – < 9.0.2 8.1.12

Advisories 1

References