CVE-2014-5198

Splunk - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.

References (3)

[Patch, Vendor Advisory] http://www.splunk.com/view/SP-CAAAM9H

[Third Party Advisory] http://secunia.com/advisories/59940

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1030690

Scores

EPSS 0.0030

EPSS Percentile 52.8%

Details

CWE

CWE-79

Status published

Products (4)

splunk/splunk

n/a/n/a

Published Aug 12, 2014

Tracked Since Feb 18, 2026