CVE-2011-4778: XSS
Published Jan 3, 2012
·Updated
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPL-44614.
Affected Software
5 affected components
Splunk splunk=4.2
Splunk splunk=4.2.1
Splunk splunk=4.2.2
Splunk splunk=4.2.3
Splunk splunk=4.2.4
Event History
Jan 3, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4778?
CVE-2011-4778 has a moderate severity rating due to its potential for substantial impact through cross-site scripting attacks.
2
How do I fix CVE-2011-4778?
To fix CVE-2011-4778, upgrade Splunk to version 4.2.5 or later.
3
What software versions are affected by CVE-2011-4778?
CVE-2011-4778 affects Splunk versions 4.2.1 to 4.2.4.
4
Can CVE-2011-4778 be exploited remotely?
Yes, CVE-2011-4778 can be exploited remotely by attackers who inject malicious web scripts or HTML.
5
What type of vulnerability is CVE-2011-4778?
CVE-2011-4778 is classified as a cross-site scripting (XSS) vulnerability.