Skip to content
OpenAdvisories
Unscored CVE-2016-4858 EUVD-2016-5839GHSA-jqwm-h8cf-c265

Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2…

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Splunk Product: Splunk Enterprise Product: Splunk Light

Description

Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

VendorProductAffectedFixed
Splunk Splunk Enterprise 6.4.x prior to 6.4.2, 6.3.x prior to 6.3.6, 6.2.x prior to 6.2.10, 6.1.x prior to 6.1.11, 6.0.x prior to 6.0.12, 5.0.x prior to 5.0.16 —
Splunk Splunk Light prior to 6.4.2 —

References