Splunk 6.5.3 Light Edition

CPE Details

Splunk 6.5.3 Light Edition
splunk
splunk
6.5.3
2019-11-05
15h48 +00:00
2019-11-05
15h48 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:splunk:splunk:6.5.3:*:*:*:light:*:*:*

Informations

Vendor

splunk

Product

splunk

Version

6.5.3

Software Edition

light

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-5727 2019-02-21 00h00 +00:00 Splunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2.x before 6.2.14, 6.1.x before 6.1.14, and 6.0.x before 6.0.15 and Splunk Light before 6.6.0 has Persistent XSS, aka SPL-138827.
5.4
Moyen
CVE-2018-7427 2018-10-23 19h00 +00:00 Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
6.1
Moyen
CVE-2018-7431 2018-10-23 19h00 +00:00 Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.
6.5
Moyen
CVE-2018-7432 2018-10-23 19h00 +00:00 Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allow remote attackers to cause a denial of service via a crafted HTTP request.
7.5
Haute
CVE-2018-11409 2018-06-08 10h00 +00:00 Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.
5.3
Moyen