CVE-2014-5197: Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1...

Security readout for executives and security teams

This is an older Splunk Enterprise vulnerability where a logged-in remote user could potentially read arbitrary files from the server through a directory traversal flaw. The affected components are Splunk Web and the Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3. Exposure is limited to Splunk Enterprise 6.1.x deployments before 6.1.3 where authenticated users can reach Splunk Web or Splunkd HTTP Server. Treat this as a targeted remediation item for legacy Splunk. It is not KEV-listed in the bundle, but arbitrary file read from a logging platform can expose sensitive operational data. Mitigation focus: Upgrade affected Splunk Enterprise 6.1.x systems to 6.1.3 or later per vendor guidance.; Review Splunk advisory SP-CAAAM9H for any product-specific remediation details.; Limit network access to Splunk Web and Splunkd HTTP Server to trusted users and management networks..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.