medium4.8
CVE-2017-12572
Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2,…
Impact
Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splunk | Splunk | Versions 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5 |