CVE-2014-8380: Cross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject arbitrary web sc...

Security readout for executives and security teams

CVE-2014-8380 is a cross-site scripting issue reported in Splunk 6.1.1. A remote attacker could cause script or HTML content to be reflected through the HTTP Referer header in a 404 response. This is most relevant where old Splunk Web instances remain accessible to users or the internet. Exposure is likely limited to organizations still running Splunk 6.1.1 or related vulnerable builds. Risk increases if Splunk Web is externally reachable or broadly accessible to users who can be targeted with crafted links. Prioritize remediation if any Splunk 6.1.1 instance is reachable by untrusted users. The issue is old, publicly documented, and affects an administrative/security platform, but available evidence does not prove active exploitation. Mitigation focus: Identify and prioritize any Splunk 6.1.1 deployments.; Check Splunk vendor guidance for fixed versions or official remediation.; Restrict access to Splunk Web to trusted networks and users..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.