CVE-2016-4857

Published: May 12, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected (20)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Up to 6.4.2
Splunk Splunk	Version 6.2.0
Splunk Splunk	Version 6.2.10
Splunk Splunk	Version 6.2.1
Splunk Splunk	Version 6.2.2
Splunk Splunk	Version 6.2.3
Splunk Splunk	Version 6.2.4
Splunk Splunk	Version 6.2.5
Splunk Splunk	Version 6.2.6
Splunk Splunk	Version 6.2.7
Splunk Splunk	Version 6.2.8
Splunk Splunk	Version 6.2.9
Splunk Splunk	Version 6.3.0
Splunk Splunk	Version 6.3.1
Splunk Splunk	Version 6.3.2
Splunk Splunk	Version 6.3.3
Splunk Splunk	Version 6.3.4
Splunk Splunk	Version 6.3.5
Splunk Splunk	Version 6.4.0
Splunk Splunk	Version 6.4.1