CVE-2012-1908: XSS
Published Aug 17, 2012
·Updated
Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected Software
27 affected components
Splunk splunk=4.0
Splunk splunk=4.0.1
Splunk splunk=4.0.2
Splunk splunk=4.0.3
Splunk splunk=4.0.4
Splunk splunk=4.0.5
Splunk splunk=4.0.6
Splunk splunk=4.0.7
Splunk splunk=4.0.8
Splunk splunk=4.0.9
Splunk splunk=4.0.10
Splunk splunk=4.0.11
Splunk splunk=4.1
Splunk splunk=4.1.1
Splunk splunk=4.1.2
Splunk splunk=4.1.3
Splunk splunk=4.1.4
Splunk splunk=4.1.5
Splunk splunk=4.1.6
Splunk splunk=4.1.7
Splunk splunk=4.1.8
Splunk splunk=4.2
Splunk splunk=4.2.1
Splunk splunk=4.2.2
Splunk splunk=4.2.3
Splunk splunk=4.2.4
Splunk splunk=4.2.5
Event History
Aug 17, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1908?
CVE-2012-1908 has a medium severity rating due to the potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2012-1908?
To fix CVE-2012-1908, upgrade to a patched version of Splunk beyond 4.3 or implement input validation to sanitize user input.
3
What software versions are affected by CVE-2012-1908?
CVE-2012-1908 affects Splunk versions 4.0 to 4.3 inclusive.
4
Can CVE-2012-1908 be exploited remotely?
Yes, CVE-2012-1908 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.
5
What impact does CVE-2012-1908 have on web applications?
CVE-2012-1908 allows attackers to execute malicious scripts in the context of a user's browser, potentially compromising user data.