CVE-2015-6514: Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Enterprise 6.2.x before 6.2.4 and Splun...

Security readout for executives and security teams

This is an authenticated cross-site scripting issue in Splunk dashboard functionality. A logged-in user could inject script or HTML through unspecified dashboard-related vectors. The cited data says Splunk Enterprise and Splunk Light 6.2.x before 6.2.4 are affected. Exposure is likely limited to organizations still running Splunk Enterprise or Splunk Light 6.2.x earlier than 6.2.4, especially where authenticated users can create or modify dashboards. Treat this as a cleanup and exposure-reduction item unless affected Splunk versions are still in production. Priority rises if many users can edit dashboards or Splunk contains sensitive operational and security data. Mitigation focus: Upgrade affected Splunk Enterprise or Splunk Light instances to 6.2.4 or later.; Review Splunk advisory SP-CAAAN7C for vendor-specific remediation guidance.; Restrict dashboard creation and editing to trusted users until remediation is complete..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.