CVE-2013-2766: Splunk

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Splunk Splunk: version 4.3 only; version 4.3.1 only; version 4.3.2 only; version 4.3.3 only; version 4.3.4 only; version 4.3.5 only

Published 2013-04-10. Last modified 2026-06-16.