Description Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking References http://www.splunk.com/view/SP-CAAAH32