CVE-2016-4859

CVE-2016-4859 is an open redirect vulnerability affecting multiple versions of Splunk Enterprise and Splunk Light. This flaw allows an attacker to redirect users to arbitrary malicious websites, facilitating phishing attacks. Rated 6.1 MEDIUM, the vulnerability requires user interaction (UI:R) but can be exploited remotely (AV:N) with low attack complexity (AC:L), potentially leading to limited confidentiality and integrity impacts (C:L/I:L). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.