Cross-Site Scripting Vulnerability in Splunk Enterprise and Splunk Light
CVE-2016-4856
4.8MEDIUM
What is CVE-2016-4856?
A cross-site scripting vulnerability exists in Splunk Enterprise and Splunk Light, allowing users with administrator rights to inject arbitrary web scripts or HTML. This vulnerability affects versions prior to 6.3.5 and can be exploited through unspecified vectors, potentially enabling attackers to execute malicious scripts in the context of users’ browsers.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Splunk Enterprise 6.3.x prior to 6.3.5
Splunk Light 6.3.x prior to 6.3.5