Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-8380
HistoryOct 21, 2014 - 3:55 p.m.

Cross site scripting

2014-10-2115:55:00
PRIOn knowledge base
www.prio-n.com
7

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer Header in a “404 Not Found” response. NOTE: this vulnerability might exist because of a CVE-2010-2429 regression.

CPENameOperatorVersion
splunkeq6.1.1

5.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%