Splunk 5.0.6

CPE Details

Splunk 5.0.6
splunk
splunk
5.0.6
2013-11-26
17h18 +00:00
2013-11-27
15h13 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:splunk:splunk:5.0.6:*:*:*:*:*:*:*

Informations

Vendor

splunk

Product

splunk

Version

5.0.6

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2018-11409 2018-06-08 10h00 +00:00 Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.
5.3
Moyen
CVE-2014-5466 2014-12-16 17h00 +00:00 Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2014-8301 2014-10-16 19h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header.
4.3
CVE-2014-8302 2014-10-16 19h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via vectors related to dashboard.
3.5
CVE-2014-3147 2014-10-09 23h00 +00:00 Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a CSV file.
3.5
CVE-2014-2578 2014-04-02 12h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3