CVE-2014-3147 in Enterprise

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a CSV file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2014-05-02

Divulgación

2014-10-09

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
68579	Splunk Enterprise CSV secuencias de comandos en sitios cruzados	79	Alto	Arreglo oficial	CVE-2014-3147

Fuentes

• MITRE
• NVD
• CVE Details