CVE-2022-32155

CVE-2022-32155 describes a configuration exposure in Splunk Universal Forwarder versions prior to 9.0, where management services are remotely accessible by default. This affects Splunk and Splunk Cloud Platform. With a CVSS score of 7.5 (HIGH), this vulnerability allows an unauthenticated attacker to achieve high confidentiality impact over the network with low complexity, though it is not considered a direct vulnerability but rather a potential exposure if not properly secured. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.