CVE-2016-4857

CVE-2016-4857 is an open redirect vulnerability affecting Splunk Enterprise versions 6.4.x prior to 6.4.2, 6.3.x prior to 6.3.6, 6.2.x prior to 6.2.11, and Splunk Light prior to 6.4.2. This flaw allows attackers to redirect users to arbitrary malicious websites, facilitating phishing attacks. Rated as Medium severity with a CVSS score of 6.1, it requires user interaction and can lead to low impact on confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.