VULNERABILITY INTELLIGENCE

CVE-2017-12572

CVSS score4.8 MEDIUM
EPSS probability0.50%
CISA KEVNot currently listed
Published2017-08-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references