CVE-2022-27183: Splunk

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The Monitoring Console app configured in Distributed mode allows for a Reflected XSS in a query parameter in Splunk Enterprise versions before 8.1.4. The Monitoring Console app is a bundled app included in Splunk Enterprise, not for download on SplunkBase, and not installed on Splunk Cloud Platform instances. Note that the Cloud Monitoring Console is not impacted.

Affected products

• Splunk Splunk: from 8.1.0, before 8.1.4 (fixed in 8.1.4)

Published 2022-05-06. Last modified 2026-06-17.