Unscored CVE-2014-5198 EUVD-2014-5096GHSA-xq4f-rq5v-998c

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3 allows remote attackers to inject arbitrary …

Published Aug 12, 2014 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.

References

59940 third-party-advisory
http://www.splunk.com/view/SP-CAAAM9H
1030690 vdb-entry