CVE-2016-4857

🗓️ 12 May 2017 18:00:00Reported by jpcertType

Open redirect vulnerability in Splunk Enterprise versions prior to 6.4.2 allows phishing attack

Reporter	Title	Published	Views	Family All 11
CNVD	Splunk Web Open Redirect Vulnerability	1 Aug 201600:00	–	cnvd
CVE	CVE-2016-4857	12 May 201718:00	–	cve
EUVD	EUVD-2016-5838	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#39926655: Splunk Enterprise and Splunk Light vulnerable to open redirect	16 Sep 201600:00	–	jvn
Japan Vulnerability Notes	Splunk Enterprise and Splunk Light vulnerable to open redirect	16 Sep 201605:08	–	jvn
NVD	CVE-2016-4857	12 May 201718:29	–	nvd
OpenVAS	Splunk Enterprise 6.2.x < 6.2.11, 6.3.x < 6.3.6, 6.4.x < 6.4.2 Open Redirect Vulnerability	19 Sep 201600:00	–	openvas
OpenVAS	Splunk Light Multiple Vulnerabilities	19 Sep 201600:00	–	openvas
OSV	CVE-2016-4857	12 May 201718:29	–	osv
Prion	Open redirect	12 May 201718:29	–	prion

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.x prior to 6.4.2"
      },
      {
        "status": "affected",
        "version": "6.3.x prior to 6.3.6"
      },
      {
        "status": "affected",
        "version": "6.2.x prior to 6.2.11"
      }
    ]
  },
  {
    "product": "Splunk Light",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 6.4.2"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/jp/JVN39926655/index.html
splunk	www.splunk.com/view/SP-CAAAPQM

12 May 2017 17:57Current

6.3Medium risk

Vulners AI Score6.3

EPSS0.00173