Splunk 4.3.1

CPE Details

Splunk 4.3.1
splunk
splunk
4.3.1
2013-04-11
09h43 +00:00
2013-04-12
12h23 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:splunk:splunk:4.3.1:*:*:*:*:*:*:*

Informations

Vendor

splunk

Product

splunk

Version

4.3.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2013-6772 2020-01-23 13h34 +00:00 Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking
4.3
Moyen
CVE-2018-11409 2018-06-08 10h00 +00:00 Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.
5.3
Moyen
CVE-2014-3147 2014-10-09 23h00 +00:00 Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a CSV file.
3.5
CVE-2013-6771 2014-08-07 08h00 +00:00 Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script.
9.3
CVE-2013-7394 2014-08-07 08h00 +00:00 The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
9
CVE-2014-2578 2014-04-02 12h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2013-6870 2013-11-25 19h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2013-2766 2013-04-10 13h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3