Skip to contentSplunk vulnerabilities
Newest
- pcre pcre2, fedoraproject fedora, splunk universal forwarder +2 moreAn out-of-bounds read was discovered in PCRE before 10.34 when the pattern \X is JIT compiled and...CVE-2019-20454Fix available5.1 Medium
- splunkSplunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an...CVE-2013-67737.8 High
- splunkSplunk before 5.0.4 lacks X-Frame-Options which can allow ClickjackingCVE-2013-67724.3 Medium
- cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 moreCF CLI writes the client id and secret to config fileCVE-2019-38006.3 Medium
- splunk software development kitsplunk-sdk does not properly verify untrusted TLS server certificatesCVE-2019-5729Fix available8.1 High
- splunkSplunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2...CVE-2019-57275.4 Medium
- splunkSplunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before...CVE-2018-74327.5 High
- splunkDirectory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0...CVE-2018-74316.5 Medium
- splunkSplunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and...CVE-2018-74297.5 High
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14,...CVE-2018-74276.1 Medium
- splunkSplunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non...CVE-2017-183487.0 High
- splunkSplunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server...CVE-2018-11409Public exploitEPSS 98.2%5.3 Medium
- splunkSplunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6...CVE-2017-170679.8 Critical
- splunkPersistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x...CVE-2017-125724.8 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x...CVE-2016-48596.1 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreCross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6...CVE-2016-48584.8 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x...CVE-2016-48576.1 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreCross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3...CVE-2016-48564.8 Medium
- splunkSplunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2...CVE-2017-5607Public exploit3.5 Low
- splunk hadoop connectSplunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated...CVE-2017-75658.8 High
- splunkSplunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3...CVE-2017-58806.5 Medium
- splunkSplunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6...CVE-2016-101269.8 Critical
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6...CVE-2015-76044.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.4, 6...CVE-2015-65154.3 Medium
- splunkCross-site scripting (XSS) vulnerability in the Dashboard in Splunk Enterprise 6.2.x before 6.2.4...CVE-2015-65144.3 Medium
- splunkCross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1...CVE-2014-54664.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk 6.1.1 allows remote attackers to inject...CVE-2014-8380Public exploit4.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4...CVE-2014-83034.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6...CVE-2014-83023.5 Low
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10...CVE-2014-83014.3 Medium
- splunkCross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before...CVE-2014-31473.5 Low
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.3...CVE-2014-51984.3 Medium
- splunkDirectory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk...CVE-2014-51974.0 Medium
- splunkThe "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to...CVE-2013-73949.0 High
- splunkDirectory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote...CVE-2013-67719.3 High
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote...CVE-2014-25784.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows...CVE-2012-64474.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote...CVE-2013-68704.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows...CVE-2013-27664.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.3 allows remote attackers to...CVE-2012-19084.3 Medium
- splunkCross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote...CVE-2011-47784.3 Medium
- splunkSplunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable...CVE-2011-4644Public exploit9.3 High
- splunkMultiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote...CVE-2011-4643Public exploit4.0 Medium
- splunkmappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy...CVE-2011-4642Public exploitEPSS 28.6%4.6 Medium
- splunkSplunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and...CVE-2010-33234.6 Medium
- splunkThe XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain...CVE-2010-33228.8 High
- splunkSplunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain...CVE-2010-25046.0 Medium
- splunkMultiple cross-site scripting (XSS) vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through...CVE-2010-25034.3 Medium
- splunkMultiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1...CVE-2010-25027.5 High
- Show moreLoading…