CVE-2018-7427: XSS
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7427?
CVE-2018-7427 has been classified as a high severity vulnerability due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2018-7427?
To fix CVE-2018-7427, you should update to Splunk Enterprise version 6.0.14 or newer, or to Splunk Light version 6.6.0 or newer.
Who is affected by CVE-2018-7427?
CVE-2018-7427 affects Splunk Web in specific versions of Splunk Enterprise and Splunk Light prior to their respective patches.
What type of vulnerability is CVE-2018-7427?
CVE-2018-7427 is a cross-site scripting (XSS) vulnerability allowing attackers to inject arbitrary web scripts or HTML.
What versions of Splunk are vulnerable to CVE-2018-7427?
Splunk versions prior to 6.0.14, 6.1.13, 6.2.14, 6.3.10, 6.4.7, and 6.5.3, along with all versions of Splunk Light before 6.6.0 are vulnerable.