CyberRota Analysis
AI-GeneratedSplunk Enterprise versions prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14 are vulnerable to a security issue where non-admin users can create dashboard views that execute JavaScript in the browsers of other users, potentially exposing sensitive data and compromising system integrity. This vulnerability arises from inadequate restrictions on tooltip options in the dashboard table renderer. Organizations using affected Splunk versions should prioritize patching to mitigate the risk of unauthorized data access.
Original NVD Description
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could store a dashboard view that runs JavaScript in the browser of another user who opens it and hovers over a sparkline table cell, allowing for access to all relevant data and system integrity available to that user. The vulnerability is possible because the dashboard table renderer does not sufficiently restrict tooltip options or escape tooltip content before display.
Related CVEs
Other vulnerabilities affecting the same vendor(s)