Threats Tagged 'cve-2026-76324'

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14 contain a Cross-Site Scripting (XSS) vulnerability. A user with the "power" Splunk role can create a malicious Splunk Web tour that executes arbitrary JavaScript in another user's browser when they open a crafted tour link. This allows the attacker to access all data available to the affected user. The vulnerability arises from insufficient output encoding of tour content and navigation links. Exploitation requires user interaction by opening the crafted link.

CVE-2026-76324 is a Cross-Site Scripting (XSS) vulnerability in Splunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14. A user with the "power" Splunk role can create a malicious Splunk Web tour that executes arbitrary JavaScript in another user's browser when they open a crafted tour link. This occurs because Splunk Web does not properly encode tour content and navigation links, allowing injection of markup. Exploitation requires user interaction by opening the crafted link. The vulnerability impacts confidentiality by allowing access to data available to the affected user. The CVSS score is 5.7, indicating medium severity.