9 matches found
CVE-2026-76326: Improper Neutralization of Input During Web Page Generation
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could store a dashboard view that runs JavaScript in the browser of another user who opens it and hovers over a sparkline table cell, allowing for access to all...
5.7CVSS5.9AI score0.00341EPSS
SaveExploits0References3
20