| Package | Affected versions | Patched versions |
|---|---|---|
| splunk | = 6.3.0= 6.3.1= 6.3.2= 6.3.3= 6.3.4= 6.3.5= 6.3.6= 6.3.7= 6.3.8= 6.4.0= 6.4.1= 6.4.2= 6.4.3= 6.4.4= 6.4.5= 6.5.0= 6.5.1 |
Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free