CVE-2017-5880: Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x...

Security readout for executives and security teams

This is a denial-of-service issue in older Splunk Web versions. An authenticated remote user could send a crafted GET request that crashes a Splunk daemon, potentially disrupting search, monitoring, or operational visibility. The bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely in legacy Splunk Enterprise or Splunk Light deployments that have not been upgraded past the fixed versions and allow authenticated users to reach Splunk Web. Prioritize remediation for legacy Splunk systems supporting monitoring, incident response, or operational dashboards. Business risk is service disruption, not data theft based on the supplied evidence. Mitigation focus: Upgrade Splunk Enterprise to the fixed release for the deployed branch or later.; Upgrade Splunk Light to 6.5.2 or later.; Review Splunk advisory SP-CAAAPW8 for vendor-specific remediation guidance..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.