CVE-2018-7427

2018-10-2321:00:00

mitre

www.cve.org

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

38.9%

JSON

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

www.splunk.com/view/SP-CAAAP5T