VULNERABILITY INTELLIGENCE

CVE-2011-4643

CVSS score4 MEDIUM

EPSS probability7.73%

CISA KEVNot currently listed

Published2012-01-03

Last modified2026-06-16

Description

Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.