exploit/multi/http/splunk_auth_rce_cve_2022_43571

weaponized

Authenticated RCE in Splunk (SimpleXML dashboard PDF generation)

view exploit source metasploittype exploitpublished 2022-11-02catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-43571US	high8.8	14.1% (97th)	Exploit	2022-11-03
In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the dashboard PDF generation component.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.