Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN71462075/index.html | Third Party Advisory VDB Entry |
| https://www.splunk.com/view/SP-CAAAPN9 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-05-12 18:29
Updated : 2023-12-10 12:01
NVD link : CVE-2016-4858
Mitre link : CVE-2016-4858
CVE.ORG link : CVE-2016-4858
JSON object : View
Products Affected
splunk
- splunk
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')