PT-2019-17834 · Splunk · Splunk Enterprise+1

Published 2019-02-21 · Updated 2019-02-22 · CVE-2019-5727

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 6.0.x through 6.5.x Splunk Light version 6.6.0 and earlier

Description The issue is related to Persistent XSS.

Recommendations For Splunk Enterprise versions 6.0.x through 6.5.x, update to a version after 6.5.5, 6.4.9, 6.3.12, 6.2.14, 6.1.14, or 6.0.15 respectively. For Splunk Light version 6.6.0 and earlier, update to a version after 6.6.0.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-5727

Affected Products

Splunk Enterprise

Splunk Light

References · 4

• https://splunk.com/view/SP-CAAAQAF · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5727 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5727 · Security Note
• http://securityfocus.com/bid/107113 · Note