CVE-2014-5198: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3 allows remot...

Security readout for executives and security teams

Splunk Enterprise 6.1.x before 6.1.3 had an XSS flaw in Splunk Web. A remote attacker could inject script or HTML through the HTTP Referer header, potentially affecting users who access the web interface. Exposure is most relevant to organizations still running Splunk Enterprise 6.1.x before 6.1.3 with Splunk Web reachable by users or networks that can send HTTP requests to it. Treat this as a targeted legacy exposure issue. It is not cited as actively exploited, but vulnerable Splunk Web instances can affect administrative users and sensitive monitoring environments. Mitigation focus: Upgrade Splunk Enterprise 6.1.x deployments to 6.1.3 or a later supported release.; Review Splunk's advisory for product-specific guidance and supported upgrade paths.; Restrict Splunk Web access to trusted administrative networks where possible..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.