CVE-2016-4856

Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4856

Splunk Enterprise 6.3.x (pre-6.3.5) and Splunk Light 6.3.x (pre-6.3.5) are affected by a stored cross-site scripting (CWE-79) vulnerability that allows an administrator to inject arbitrary web script or HTML via unspecified vectors. The issue stems from incorrect handling in the web interface, en...