Splunk 3.4.1

CPE Details

Splunk 3.4.1
splunk
splunk
3.4.1
2012-01-03
14h42 +00:00
2013-04-12
12h23 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:splunk:splunk:3.4.1:*:*:*:*:*:*:*

Informations

Vendor

splunk

Product

splunk

Version

3.4.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2013-6772 2020-01-23 13h34 +00:00 Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking
4.3
Moyen
CVE-2018-11409 2018-06-08 10h00 +00:00 Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.
5.3
Moyen
CVE-2014-3147 2014-10-09 23h00 +00:00 Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a CSV file.
3.5
CVE-2013-6771 2014-08-07 08h00 +00:00 Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script.
9.3
CVE-2013-7394 2014-08-07 08h00 +00:00 The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
9
CVE-2014-2578 2014-04-02 12h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2013-6870 2013-11-25 19h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3
CVE-2011-4644 2012-01-03 10h00 +00:00 Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request.
9.3