Splunk Multiple Vulnerabilities

Some vulnerabilities have been identified in Splunk, which can be exploited by malicious people to conduct cross-site scripting attacks and cause a DoS (Denial of Service).
 

1. Certain unspecified input passed to the Splunk Web component is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
   Successful exploitation of this vulnerability requires that the victim uses a non-RFC compliant browser.
2. Certain unspecified input passed to the Splunk Web component is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.
3. An unspecified error within Splunkd when handling splunktcp inputs can be exploited to render the service unusable.
   Successful exploitation of this vulnerability requires that splunktcp inputs are enabled (disabled by default).