CVE-2014-8301: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remo...

Security readout for executives and security teams

This CVE is an older cross-site scripting issue in Splunk Web. If an organization still runs Splunk Enterprise 5.0.x before 5.0.10, a remote attacker could cause malicious script or HTML to be handled through the HTTP Referer header. The source bundle does not show active exploitation. Exposure is likely limited to organizations still operating Splunk Enterprise 5.0.x before 5.0.10 with Splunk Web accessible to users or networks where malicious browser interactions could reach it. Treat this as a legacy hygiene and exposure-reduction issue. It is not supported as actively exploited by the provided sources, but exposed old Splunk Web instances should be upgraded or isolated promptly. Mitigation focus: Upgrade affected Splunk Enterprise 5.0.x deployments to 5.0.10 or later.; Check Splunk’s advisory for vendor-supported remediation guidance.; Restrict Splunk Web access to trusted networks while remediation is pending..

Prepared

Jun 14, 2026, 13:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.