Sploitus

CVE-2022-43571

5 known exploits for CVE-2022-43571

In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.

Affected products
Splunk Enterprise
Splunk
< 8.1.12, 8.2.9, 9.0.2
Splunk Splunk Cloud Platform
< 9.0.2209
Fix
Available
CVSS 3.1
8.8 HIGH
EPSS
13.8% (96th percentile)
Weakness
CWE-94
NVD status
Modified
Published
2022-11-03
CVE-2022-43571 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2022-43571

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2022-43571
2026-09-08 KitPloitKITPLOIT
📄 Splunk Enterprise 8.2.9 / 9.0.2 Authenticated Remote Code Execution
2026-02-20 indoushkaPACKETSTORM
📄 Splunk Enterprise 8.2.9 / 9.0.2 Remote Code Execution
2026-01-21 psytester, Danylo Dmytriiev, Maksim RogovPACKETSTORMRuby
Exploit for Code Injection in Splunk
2022-12-27 ohnonoyesyesGITHUB
Authenticated RCE in Splunk (SimpleXML dashboard PDF generation)
2022-11-02 Maksim Rogov, Danylo Dmytriiev, psytesterMETASPLOITRuby