Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2015-6515
cve-2015-6515
cross-site scripting
xss
splunk web
splunk enterprise
vulnerability
security
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.1%
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.4, 6.1.x before 6.1.8, 6.0.x before 6.0.9, and 5.0.x before 5.0.13 and Splunk Light 6.2.x before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via a header.
Affected configurations
Node
splunksplunkMatch5.0.0enterprise
ORsplunksplunkMatch5.0.1enterprise
ORsplunksplunkMatch5.0.2enterprise
ORsplunksplunkMatch5.0.3enterprise
ORsplunksplunkMatch5.0.4enterprise
ORsplunksplunkMatch5.0.5enterprise
ORsplunksplunkMatch5.0.6enterprise
ORsplunksplunkMatch5.0.7enterprise
ORsplunksplunkMatch5.0.8enterprise
ORsplunksplunkMatch5.0.9enterprise
ORsplunksplunkMatch5.0.10enterprise
ORsplunksplunkMatch5.0.11enterprise
ORsplunksplunkMatch5.0.12enterprise
ORsplunksplunkMatch6.0.0enterprise
ORsplunksplunkMatch6.0.1enterprise
ORsplunksplunkMatch6.0.2enterprise
ORsplunksplunkMatch6.0.3enterprise
ORsplunksplunkMatch6.0.4enterprise
ORsplunksplunkMatch6.0.5enterprise
ORsplunksplunkMatch6.0.6enterprise
ORsplunksplunkMatch6.0.7enterprise
ORsplunksplunkMatch6.0.8enterprise
ORsplunksplunkMatch6.1.0enterprise
ORsplunksplunkMatch6.1.1enterprise
ORsplunksplunkMatch6.1.2enterprise
ORsplunksplunkMatch6.1.3enterprise
ORsplunksplunkMatch6.1.4enterprise
ORsplunksplunkMatch6.1.5enterprise
ORsplunksplunkMatch6.1.6enterprise
ORsplunksplunkMatch6.1.7enterprise
ORsplunksplunkMatch6.2.0enterprise
ORsplunksplunkMatch6.2.0light
ORsplunksplunkMatch6.2.1enterprise
ORsplunksplunkMatch6.2.1light
ORsplunksplunkMatch6.2.2enterprise
ORsplunksplunkMatch6.2.2light
ORsplunksplunkMatch6.2.3enterprise
ORsplunksplunkMatch6.2.3light
Related
prion
prion
Cross site scripting
2015-08-18 15:59:00
cvelist
cvelist
CVE-2015-6515
2022-10-03 16:15:55
nvd
nvd
CVE-2015-6515
2015-08-18 15:59:16
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.1%
Related for CVE-2015-6515