CVE-2014-5197

MEDIUM 4.0CVE-2014-5197 · Published 12/08/2014 · updated 17/06/2026

In short

CVE-2014-5197 is a MEDIUM (CVSS 4.0) vulnerability affecting splunk (splunk).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
splunk splunk	`= 6.1= 6.1.1= 6.1.2`	No fix yet

Description

Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI, related to search ids.

References

secunia.com/advisories/59940
securitytracker.com/id/1030690
splunk.com/view/SP-CAAAM9H · Patch

More vulnerabilities in splunk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free