Unscored CVE-2014-3147 EUVD-2014-3165GHSA-vjch-wg7c-26c9

Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users t…

Published Oct 10, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a CSV file.

References

1030800 vdb-entry
http://www.splunk.com/view/SP-CAAAMSH