Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking
Published January 23, 2020.
Splunk Splunk