CVE-2016-4857

2017-05-1218:00:00

jpcert

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.9%

JSON

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CNA Affected

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.x prior to 6.4.2"
      },
      {
        "status": "affected",
        "version": "6.3.x prior to 6.3.6"
      },
      {
        "status": "affected",
        "version": "6.2.x prior to 6.2.11"
      }
    ]
  },
  {
    "product": "Splunk Light",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 6.4.2"
      }
    ]
  }
]