CVE-2016-4859

2017-05-1218:00:00

jpcert

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.3 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CNA Affected

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.x prior to 6.4.3"
      },
      {
        "status": "affected",
        "version": "6.3.x prior to 6.3.6"
      },
      {
        "status": "affected",
        "version": "6.2.x prior to 6.2.10"
      },
      {
        "status": "affected",
        "version": "6.1.x prior to 6.1.11"
      },
      {
        "status": "affected",
        "version": "6.0.x prior to 6.0.12"
      },
      {
        "status": "affected",
        "version": "5.0.x prior to 5.0.16"
      }
    ]
  },
  {
    "product": "Splunk Light",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 6.4.3"
      }
    ]
  }
]