CVE-2014-3147 in Enterprise

Sumário (Inglês)

Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a CSV file.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

02/05/2014

Divulgação

09/10/2014

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
68579	Splunk Enterprise CSV Script de Site Cruzado	79	Alto	Correção oficial	CVE-2014-3147

Fontes

• MITRE
• NVD
• CVE Details