CVE-2011-4642

🗓️ 03 Jan 2012 11:00:00Reported by mitreType

mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 allows remote authenticated administrators to execute arbitrary code by leveraging the sys module in a request to the search application

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2011-4642	15 Dec 201100:00	–	circl
Cvelist	CVE-2011-4642	3 Jan 201211:00	–	cvelist
Metasploit	Splunk Search Remote Code Execution	22 Dec 201119:04	–	metasploit
NVD	CVE-2011-4642	3 Jan 201211:55	–	nvd
OpenVAS	Splunk 4.0 - 4.2.4 Multiple Vulnerabilities - Active Check	22 Dec 201100:00	–	openvas
Packet Storm	Splunk Search Remote Code Execution	23 Dec 201100:00	–	packetstorm
Prion	Cross site request forgery (csrf)	3 Jan 201211:55	–	prion
Saint	Splunk Search Jobs Remote Code Execution	13 Jan 201200:00	–	saint
Saint	Splunk Search Jobs Remote Code Execution	13 Jan 201200:00	–	saint
Saint	Splunk Search Jobs Remote Code Execution	13 Jan 201200:00	–	saint

NVD

Node

splunk splunkMatch4.2

splunk splunkMatch4.2.1

splunk splunkMatch4.2.2

splunk splunkMatch4.2.3

splunk splunkMatch4.2.4

Source	Link
splunk	www.splunk.com/view/SP-CAAAGMM
securitytracker	www.securitytracker.com/id
exploit-db	www.exploit-db.com/exploits/18245/
sec-1	www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf
secunia	www.secunia.com/advisories/47232
sec-1	www.sec-1.com/blog/

29 Apr 2026 01:13Current

7.6High risk

Vulners AI Score7.6

CVSS 24.6

EPSS0.18693

CWE-352