CVE-2017-12572

Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2…

published August 5, 2017

CVSS
—
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00503 · 42.1th percentile
Published
2017-08-05T21:00Z
EPSS history
Timeline
  • 05 AUG 21:00Z
    Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2…
    cvelistv5