Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

splunk splunk 4.2. vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4778
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x prior to 4.2.5 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka SPL-44614.
Splunk Splunk 4.2.2Splunk Splunk 4.2.3Splunk Splunk 4.2Splunk Splunk 4.2.1Splunk Splunk 4.2.4
NA
CVE-2011-4642
mappy.py in Splunk Web in Splunk 4.2.x prior to 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application, as d...
Splunk Splunk 4.2.4Splunk Splunk 4.2.2Splunk Splunk 4.2.3Splunk Splunk 4.2Splunk Splunk 4.2.1
NA
CVE-2011-4643
Multiple directory traversal vulnerabilities in Splunk 4.x prior to 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.
Splunk Splunk 4.0Splunk Splunk 4.0.1Splunk Splunk 4.0.9Splunk Splunk 4.0.10Splunk Splunk 4.1.5Splunk Splunk 4.1.6Splunk Splunk 4.2.4Splunk Splunk 4.0.5Splunk Splunk 4.0.6Splunk Splunk 4.1.1Splunk Splunk 4.1.2Splunk Splunk 4.2Splunk Splunk 4.2.1Splunk Splunk 4.0.2Splunk Splunk 4.0.3Splunk Splunk 4.0.4Splunk Splunk 4.0.11Splunk Splunk 4.1Splunk Splunk 4.1.7Splunk Splunk 4.1.8Splunk Splunk 4.0.7Splunk Splunk 4.0.8
NA
CVE-2012-1908
Cross-site scripting (XSS) vulnerability in Splunk 4.0 up to and including 4.3 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors.
Splunk Splunk 4.2.5Splunk Splunk 4.2.4Splunk Splunk 4.1Splunk Splunk 4.0.11Splunk Splunk 4.0.10Splunk Splunk 4.0.9Splunk Splunk 4.0.8Splunk Splunk 4.2.2Splunk Splunk 4.2Splunk Splunk 4.1.4Splunk Splunk 4.1.2Splunk Splunk 4.0.7Splunk Splunk 4.0.5Splunk Splunk 4.1.8Splunk Splunk 4.1.7Splunk Splunk 4.1.6Splunk Splunk 4.1.5Splunk Splunk 4.0.3Splunk Splunk 4.0.2Splunk Splunk 4.0.1Splunk Splunk 4.0Splunk Splunk 4.2.3
NA
CVE-2013-6870
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk prior to 5.0.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Splunk Splunk 5.0.3Splunk Splunk 5.0.1Splunk Splunk 4.3.7Splunk Splunk 5.0Splunk SplunkSplunk Splunk 5.0.4Splunk Splunk 4.2.2Splunk Splunk 4.2.1Splunk Splunk 4.2.Splunk Splunk 4.2Splunk Splunk 4.0.5Splunk Splunk 4.0.4Splunk Splunk 4.0.3Splunk Splunk 4.0.2Splunk Splunk 3.4.12Splunk Splunk 3.4.11Splunk Splunk 3.4.10Splunk Splunk 3.4.1Splunk Splunk 3.4Splunk Splunk 3.1.4Splunk Splunk 3.1.3Splunk Splunk 3.1.2
NA
CVE-2011-4644
Splunk 4.2.5 and previous versions, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote malicious users to (1) read arbitrary files via a management-console se...
Splunk Splunk 4.1.7Splunk Splunk 4.1.6Splunk Splunk 4.1.5Splunk Splunk 4.1.4Splunk Splunk 4.0.2Splunk Splunk 4.0.1Splunk Splunk 4.0Splunk Splunk 3.4.14Splunk Splunk 3.3.3Splunk Splunk 3.3.2Splunk Splunk 3.3.1Splunk Splunk 3.3Splunk Splunk 3.0.2Splunk Splunk 3.0.1Splunk Splunk 3.0Splunk Splunk 2.2.6Splunk Splunk 2.2.3Splunk Splunk 4.2.1Splunk Splunk 4.1.8Splunk Splunk 4.1.3Splunk Splunk 4.1.1Splunk Splunk 4.0.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook