VYPR
← All advisories
Medium severity4.8NVD Advisory· Published May 12, 2017· Updated Jun 17, 2026

CVE-2016-4856

CVE-2016-4856

Description

Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Splunk/Splunk10 versions
    cpe:2.3:a:splunk:splunk:6.3.0:*:*:*:enterprise:*:*:*+ 9 more
    • cpe:2.3:a:splunk:splunk:6.3.0:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.0:*:*:*:light:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.1:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.1:*:*:*:light:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.2:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.2:*:*:*:light:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.3:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.3:*:*:*:light:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.4:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:splunk:splunk:6.3.4:*:*:*:light:*:*:*
  • Splunk/Splunk Enterprisellm-fuzzy
    Range: <6.3.5
  • Splunk/Splunk Lightllm-fuzzy
    Range: <6.3.5
  • Splunk Inc./Splunk Enterprisev5
    Range: 6.3.x prior to 6.3.5
  • Splunk Inc./Splunk Lightv5
    Range: 6.3.x prior to 6.3.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.