CVE-2022-37439: Splunk

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In Splunk Enterprise and Universal Forwarder versions in the following table, indexing a specially crafted ZIP file using the file monitoring input can result in a crash of the application. Attempts to restart the application would result in a crash and would require manually removing the malformed file.

Affected products

• Splunk Splunk: from 8.1.0, before 8.1.11 (fixed in 8.1.11); from 8.2.0, before 8.2.7.1 (fixed in 8.2.7.1)
• Splunk Universal Forwarder: from 8.1.0, before 8.1.11 (fixed in 8.1.11); from 8.2.0, before 8.2.7.1 (fixed in 8.2.7.1)

Published 2022-08-16. Last modified 2026-06-17.