Lucene search

[email protected]CVE-2010-2429

HistoryJun 24, 2010 - 12:17 p.m.

CVE-2010-2429

2010-06-2412:17:45

CWE-79

[email protected]

web.nvd.nist.gov

cve-2010-2429

splunk

xss

vulnerability

web script

html

http referer

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.4%

JSON

Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a “404 Not Found” response.

Affected configurations

NVD

Node

splunksplunkMatch4.0

splunksplunkMatch4.0.1

splunksplunkMatch4.0.2

splunksplunkMatch4.0.3

splunksplunkMatch4.0.4

splunksplunkMatch4.0.5

splunksplunkMatch4.0.6

splunksplunkMatch4.0.7

splunksplunkMatch4.0.8

splunksplunkMatch4.0.9

splunksplunkMatch4.0.10

splunksplunkMatch4.0.11

splunksplunkMatch4.1

splunksplunkMatch4.1.1

splunksplunkMatch4.1.2

AND

microsoftinternet_explorer

CPENameOperatorVersion
splunk:splunksplunkeq4.0
splunk:splunksplunkeq4.0.1
splunk:splunksplunkeq4.0.2
splunk:splunksplunkeq4.0.3
splunk:splunksplunkeq4.0.4
splunk:splunksplunkeq4.0.5
splunk:splunksplunkeq4.0.6
splunk:splunksplunkeq4.0.7
splunk:splunksplunkeq4.0.8
splunk:splunksplunkeq4.0.9

CPE	Name	Operator	Version
splunk:splunk	splunk	eq	4.0
splunk:splunk	splunk	eq	4.0.1
splunk:splunk	splunk	eq	4.0.2
splunk:splunk	splunk	eq	4.0.3
splunk:splunk	splunk	eq	4.0.4
splunk:splunk	splunk	eq	4.0.5
splunk:splunk	splunk	eq	4.0.6
splunk:splunk	splunk	eq	4.0.7
splunk:splunk	splunk	eq	4.0.8
splunk:splunk	splunk	eq	4.0.9