Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/92126
http://www.splunk.com/view/SP-CAAAKQX
http://www.securitytracker.com/id/1029966