CVE-2014-8301: XSS
Published Oct 16, 2014
·Updated
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header.
Affected Software
10 affected components
Splunk splunk=5.0
Splunk splunk=5.0.1
Splunk splunk=5.0.2
Splunk splunk=5.0.3
Splunk splunk=5.0.4
Splunk splunk=5.0.5
Splunk splunk=5.0.6
Splunk splunk=5.0.7
Splunk splunk=5.0.8
Splunk splunk=5.0.9
Event History
Oct 16, 2014
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8301?
The CVE-2014-8301 vulnerability is considered to be of medium severity due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2014-8301?
To fix CVE-2014-8301, upgrade Splunk Enterprise to version 5.0.10 or later.
3
What versions of Splunk are affected by CVE-2014-8301?
CVE-2014-8301 affects Splunk Enterprise versions 5.0.x prior to 5.0.10.
4
What type of vulnerability is CVE-2014-8301?
CVE-2014-8301 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
5
Can CVE-2014-8301 be exploited through the HTTP Referer header?
Yes, the vulnerability can be exploited by injecting arbitrary web scripts via the HTTP Referer header.