CVE-2023-22933

moderate-risk

Published 2023-02-14

In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the ‘layoutPanel’ attribute in the ‘module’ tag’.

Do I need to act?

0.84% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.0/10 High

NETWORK / LOW complexity

Affected Products (2)

Splunk

Splunk Cloud Platform

Affected Vendors

Splunk

References (4)

Vendor Advisory https://advisory.splunk.com/advisories/SVD-2023-0203

Exploit https://research.splunk.com/application/9ac2bfea-a234-4a18-9d37-6d747e85c2e4

Vendor Advisory https://advisory.splunk.com/advisories/SVD-2023-0203

Exploit https://research.splunk.com/application/9ac2bfea-a234-4a18-9d37-6d747e85c2e4

/ 100

moderate-risk

Severity 28/34 · Critical

Exploitability 3/34 · Minimal

Exposure 7/34 · Low