Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

splunk splunk 6.3.1 vulnerabilities and exploits

(subscribe to this query)
4.8
CVSSv3
CVE-2016-4856
Cross-site scripting vulnerability in Splunk Enterprise 6.3.x before 6.3.5 and Splunk Light 6.3.x before 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
Splunk Splunk 6.3.4Splunk Splunk 6.3.3Splunk Splunk 6.3.2Splunk Splunk 6.3.1Splunk Splunk 6.3.0
4.8
CVSSv3
CVE-2017-12572
Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x prior to 6.5.2, 6.4.x prior to 6.4.6, and 6.3.x prior to 6.3.9 and Splunk Light prior to 6.5.2, with exploitation requiring administrative access, aka SPL-134104.
Splunk Splunk 6.3.4Splunk Splunk 6.3.6Splunk Splunk 6.4.1Splunk Splunk 6.5.0Splunk Splunk 6.3.8Splunk Splunk 6.4.5Splunk Splunk 6.4.4Splunk Splunk 6.4.3Splunk Splunk 6.5.1Splunk Splunk 6.3.0Splunk Splunk 6.3.1Splunk Splunk 6.3.2Splunk Splunk 6.3.3Splunk Splunk 6.3.5Splunk Splunk 6.3.7Splunk Splunk 6.4.2Splunk Splunk 6.4.0
6.1
CVSSv3
CVE-2016-4857
Open redirect vulnerability in Splunk Enterprise 6.4.x before 6.4.2, Splunk Enterprise 6.3.x before 6.3.6, Splunk Enterprise 6.2.x before 6.2.11 and Splunk Light before 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Splunk Splunk 6.2.4Splunk Splunk 6.2.5Splunk Splunk 6.2.6Splunk Splunk 6.2.7Splunk Splunk 6.2.8Splunk Splunk 6.4.0Splunk Splunk 6.4.1Splunk Splunk 6.2.1Splunk Splunk 6.2.0Splunk Splunk 6.3.5Splunk Splunk 6.3.4Splunk Splunk 6.2.9Splunk Splunk 6.2.3Splunk Splunk 6.3.2Splunk Splunk 6.3.0Splunk SplunkSplunk Splunk 6.2.10Splunk Splunk 6.2.2Splunk Splunk 6.3.3Splunk Splunk 6.3.1
4.8
CVSSv3
CVE-2016-4858
Cross-site scripting vulnerability in Splunk Enterprise 6.4.x before 6.4.2, Splunk Enterprise 6.3.x before 6.3.6, Splunk Enterprise 6.2.x before 6.2.10, Splunk Enterprise 6.1.x before 6.1.11, Splunk Enterprise 6.0.x before 6.0.12, Splunk Enterprise 5.0.x before 5.0.16 and Splunk ...
Splunk Splunk 5.0.15Splunk Splunk 5.0.1Splunk Splunk 5.0.0Splunk SplunkSplunk Splunk 6.0.11Splunk Splunk 6.1.10Splunk Splunk 6.1.9Splunk Splunk 6.1.8Splunk Splunk 6.1.7Splunk Splunk 6.2.3Splunk Splunk 6.2.2Splunk Splunk 6.2.1Splunk Splunk 6.2.0Splunk Splunk 5.0.14Splunk Splunk 5.0.12Splunk Splunk 5.0.5Splunk Splunk 5.0.3Splunk Splunk 6.0.9Splunk Splunk 6.0.7Splunk Splunk 6.0.2Splunk Splunk 6.0.0Splunk Splunk 6.1.2
6.1
CVSSv3
CVE-2016-4859
Open redirect vulnerability in Splunk Enterprise 6.4.x before 6.4.3, Splunk Enterprise 6.3.x before 6.3.6, Splunk Enterprise 6.2.x before 6.2.10, Splunk Enterprise 6.1.x before 6.1.11, Splunk Enterprise 6.0.x before 6.0.12, Splunk Enterprise 5.0.x before 5.0.16 and Splunk Light b...
Splunk Splunk 5.0.11Splunk Splunk 5.0.10Splunk Splunk 5.0.9Splunk Splunk 5.0.8Splunk Splunk 6.0.7Splunk Splunk 6.0.6Splunk Splunk 6.0.5Splunk Splunk 6.0.4Splunk Splunk 6.1.4Splunk Splunk 6.1.3Splunk Splunk 6.1.0Splunk Splunk 6.2.4Splunk Splunk 5.0.15Splunk Splunk 5.0.13Splunk Splunk 5.0.6Splunk Splunk 5.0.4Splunk SplunkSplunk Splunk 6.0.10Splunk Splunk 6.0.8Splunk Splunk 6.0.3Splunk Splunk 6.0.1Splunk Splunk 6.1.7
9.8
CVSSv3
CVE-2016-10126
Splunk Web in Splunk Enterprise 5.0.x prior to 5.0.17, 6.0.x prior to 6.0.13, 6.1.x prior to 6.1.12, 6.2.x prior to 6.2.12, 6.3.x prior to 6.3.8, and 6.4.x prior to 6.4.4 allows remote malicious users to conduct HTTP request injection attacks and obtain sensitive REST API authent...
Splunk Splunk 5.0.1Splunk Splunk 5.0.10Splunk Splunk 5.0.6Splunk Splunk 5.0.7Splunk Splunk 5.0.13Splunk Splunk 5.0.14Splunk Splunk 5.0.2Splunk Splunk 5.0.3Splunk Splunk 5.0.11Splunk Splunk 5.0.12Splunk Splunk 5.0.8Splunk Splunk 5.0.9Splunk Splunk 5.0.15Splunk Splunk 5.0.16Splunk Splunk 5.0.0Splunk Splunk 5.0.4Splunk Splunk 5.0.5Splunk Splunk 6.0.9Splunk Splunk 6.0.10Splunk Splunk 6.0.4Splunk Splunk 6.0.5Splunk Splunk 6.0.0
6.5
CVSSv3
CVE-2017-5880
Splunk Web in Splunk Enterprise versions 6.5.x prior to 6.5.2, 6.4.x prior to 6.4.5, 6.3.x prior to 6.3.9, 6.2.x prior to 6.2.13, 6.1.x prior to 6.1.12, 6.0.x prior to 6.0.13, 5.0.x prior to 5.0.17 and Splunk Light versions prior to 6.5.2 allows remote authenticated users to caus...
Splunk Splunk 5.0.5Splunk Splunk 5.0.3Splunk Splunk 5.0.13Splunk Splunk 5.0.11Splunk Splunk 5.0.1Splunk Splunk 6.0.1Splunk Splunk 6.0.3Splunk Splunk 6.0.10Splunk Splunk 6.0.12Splunk Splunk 6.1.10Splunk Splunk 6.1.4Splunk Splunk 6.1.6Splunk Splunk 6.2.4Splunk Splunk 6.2.6Splunk Splunk 6.2.1Splunk Splunk 6.2.2Splunk Splunk 6.3.6Splunk Splunk 6.3.8Splunk Splunk 6.4.4Splunk Splunk 6.5.1Splunk Splunk 5.0.2Splunk Splunk 5.0.16
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook