Splunk last week released an update for Splunk Enterprise to address an information theft bug and a persistent Cross Site Scripting (XSS) vulnerability.
Article Link: http://feedproxy.google.com/~r/Securityweek/~3/F9aI_z1lxeQ/splunk-patches-information-theft-and-xss-flaws