Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

splunk vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2014-8302
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via vectors related to dashboard....
Splunk Splunk 5.0Splunk Splunk 5.0.2Splunk Splunk 5.0.9Splunk Splunk 6.0.0Splunk Splunk 6.0.5Splunk Splunk 6.1.1Splunk Splunk 6.1.3Splunk Splunk 6.0.1Splunk Splunk 6.0.2Splunk Splunk 6.0.3Splunk Splunk 6.0.4Splunk Splunk 5.0.4Splunk Splunk 5.0.5Splunk Splunk 5.0.6Splunk Splunk 5.0.7Splunk Splunk 5.0.1Splunk Splunk 5.0.3Splunk Splunk 5.0.8Splunk Splunk 6.0Splunk Splunk 6.1Splunk Splunk 6.1.2
NA
CVE-2015-6515
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.4, 6.1.x before 6.1.8, 6.0.x before 6.0.9, and 5.0.x before 5.0.13 and Splunk Light 6.2.x before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via a header....
Splunk Splunk 5.0.12Splunk Splunk 6.0.0Splunk Splunk 6.0.1Splunk Splunk 6.0.2Splunk Splunk 6.1.7Splunk Splunk 6.2.0Splunk Splunk 6.2.3Splunk Splunk 6.2.2Splunk Splunk 5.0.4Splunk Splunk 5.0.5Splunk Splunk 5.0.6Splunk Splunk 5.0.7Splunk Splunk 6.0.8Splunk Splunk 6.1.0Splunk Splunk 6.1.1Splunk Splunk 6.1.2Splunk Splunk 5.0.1Splunk Splunk 5.0.3Splunk Splunk 5.0.8Splunk Splunk 5.0.10Splunk Splunk 6.0.4Splunk Splunk 6.0.6Splunk Splunk 6.1.4Splunk Splunk 6.1.6Splunk Splunk 6.2.1Splunk Splunk 5.0.0Splunk Splunk 5.0.2Splunk Splunk 5.0.9Splunk Splunk 5.0.11Splunk Splunk 6.0.3Splunk Splunk 6.0.5Splunk Splunk 6.0.7Splunk Splunk 6.1.3Splunk Splunk 6.1.5
NA
CVE-2010-3322
The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors....
Splunk Splunk 4.1Splunk Splunk 4.1.1Splunk Splunk 4.0.11Splunk Splunk 4.1.3Splunk Splunk 4.1.4Splunk Splunk 4.1.2Splunk Splunk 4.0.2Splunk Splunk 4.0.10Splunk Splunk 4.0Splunk Splunk 4.0.4Splunk Splunk 4.0.5Splunk Splunk 4.0.6Splunk Splunk 4.0.8Splunk Splunk 4.0.1Splunk Splunk 4.0.3Splunk Splunk 4.0.7Splunk Splunk 4.0.9
4.8
CVSSv3
CVE-2017-12572
Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104....
Splunk Splunk 6.3.4Splunk Splunk 6.3.6Splunk Splunk 6.4.1Splunk Splunk 6.5.0Splunk Splunk 6.3.8Splunk Splunk 6.4.5Splunk Splunk 6.4.4Splunk Splunk 6.4.3Splunk Splunk 6.5.1Splunk Splunk 6.3.0Splunk Splunk 6.3.1Splunk Splunk 6.3.2Splunk Splunk 6.3.3Splunk Splunk 6.3.5Splunk Splunk 6.3.7Splunk Splunk 6.4.2Splunk Splunk 6.4.0
NA
CVE-2011-4643
Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243....
Splunk Splunk 4.0Splunk Splunk 4.0.1Splunk Splunk 4.0.9Splunk Splunk 4.0.10Splunk Splunk 4.1.5Splunk Splunk 4.1.6Splunk Splunk 4.2.4Splunk Splunk 4.0.5Splunk Splunk 4.0.6Splunk Splunk 4.1.1Splunk Splunk 4.1.2Splunk Splunk 4.2Splunk Splunk 4.2.1Splunk Splunk 4.0.2Splunk Splunk 4.0.3Splunk Splunk 4.0.4Splunk Splunk 4.0.11Splunk Splunk 4.1Splunk Splunk 4.1.7Splunk Splunk 4.1.8Splunk Splunk 4.0.7Splunk Splunk 4.0.8Splunk Splunk 4.1.3Splunk Splunk 4.1.4Splunk Splunk 4.2.2Splunk Splunk 4.2.3
NA
CVE-2014-5466
Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....
Splunk Splunk 5.0.4Splunk Splunk 5.0.2Splunk Splunk 6.0.2Splunk Splunk 6.0.4Splunk Splunk 6.1.4Splunk Splunk 5.0.9Splunk Splunk 5.0.8Splunk Splunk 5.0.7Splunk Splunk 5.0.6Splunk Splunk 6.0.6Splunk Splunk 6.1Splunk Splunk 6.1.1Splunk Splunk 6.1.2Splunk Splunk 5.0.1Splunk Splunk 5.0Splunk Splunk 6.0Splunk Splunk 6.0.1Splunk Splunk 5.0.5Splunk Splunk 5.0.3Splunk Splunk 6.0.3Splunk Splunk 6.0.5Splunk Splunk 6.1.3
NA
CVE-2010-2503
Multiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) redirects, aka SPL-31067; (2) unspecified "user->user or user->admin" vectors, aka...
Splunk Splunk 4.0.9Splunk Splunk 4.0Splunk Splunk 4.0.1Splunk Splunk 4.0.2Splunk Splunk 4.0.7Splunk Splunk 4.0.4Splunk Splunk 4.0.6Splunk Splunk 4.0.8Splunk Splunk 4.0.10Splunk Splunk 4.0.3Splunk Splunk 4.0.5Splunk Splunk 4.1Splunk Splunk 4.1.1
NA
CVE-2014-8301
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header....
Splunk Splunk 5.0.2Splunk Splunk 5.0.4Splunk Splunk 5.0.6Splunk Splunk 5.0.7Splunk Splunk 5.0.8Splunk Splunk 5.0.9Splunk Splunk 5.0Splunk Splunk 5.0.1Splunk Splunk 5.0.3Splunk Splunk 5.0.5
NA
CVE-2014-5197
Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI, related to search ids....
Splunk Splunk 6.1Splunk Splunk 6.1.1Splunk Splunk 6.1.2
NA
CVE-2015-7604
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6 and Splunk Light 6.2.x before 6.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors....
Splunk Splunk 6.2.0Splunk Splunk 6.2.1Splunk Splunk 6.2.2Splunk Splunk 6.2.3Splunk Splunk 6.2.4Splunk Splunk 6.2.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-31805dosCVE-2022-26727CVE-2022-26712CVE-2022-1529CVE-2022-20807template injectionCVE-2022-26690cross-site scripting
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook