Lucene search
HistoryNov 25, 2013 - 7:55 p.m.
CVE-2013-6870
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.7%
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
splunksplunkRange≤5.0.5
ORsplunksplunkMatch2.1
ORsplunksplunkMatch2.2
ORsplunksplunkMatch2.2.1
ORsplunksplunkMatch2.2.3
ORsplunksplunkMatch2.2.6
ORsplunksplunkMatch3.0
ORsplunksplunkMatch3.0.1
ORsplunksplunkMatch3.0.2
ORsplunksplunkMatch3.1
ORsplunksplunkMatch3.1.1
ORsplunksplunkMatch3.1.2
ORsplunksplunkMatch3.1.3
ORsplunksplunkMatch3.1.4
ORsplunksplunkMatch3.2
ORsplunksplunkMatch3.2.1
ORsplunksplunkMatch3.2.2
ORsplunksplunkMatch3.2.3
ORsplunksplunkMatch3.2.4
ORsplunksplunkMatch3.2.5
ORsplunksplunkMatch3.2.6
ORsplunksplunkMatch3.3
ORsplunksplunkMatch3.3.1
ORsplunksplunkMatch3.3.2
ORsplunksplunkMatch3.3.3
ORsplunksplunkMatch3.3.4
ORsplunksplunkMatch3.4
ORsplunksplunkMatch3.4.1
ORsplunksplunkMatch3.4.2
ORsplunksplunkMatch3.4.3
ORsplunksplunkMatch3.4.5
ORsplunksplunkMatch3.4.6
ORsplunksplunkMatch3.4.8
ORsplunksplunkMatch3.4.9
ORsplunksplunkMatch3.4.10
ORsplunksplunkMatch3.4.11
ORsplunksplunkMatch3.4.12
ORsplunksplunkMatch3.4.13
ORsplunksplunkMatch3.4.14
ORsplunksplunkMatch4.0
ORsplunksplunkMatch4.0.1
ORsplunksplunkMatch4.0.2
ORsplunksplunkMatch4.0.3
ORsplunksplunkMatch4.0.4
ORsplunksplunkMatch4.0.5
ORsplunksplunkMatch4.0.6
ORsplunksplunkMatch4.0.7
ORsplunksplunkMatch4.0.8
ORsplunksplunkMatch4.0.9
ORsplunksplunkMatch4.0.10
ORsplunksplunkMatch4.0.11
ORsplunksplunkMatch4.1
ORsplunksplunkMatch4.1.1
ORsplunksplunkMatch4.1.2
ORsplunksplunkMatch4.1.3
ORsplunksplunkMatch4.1.4
ORsplunksplunkMatch4.1.5
ORsplunksplunkMatch4.1.6
ORsplunksplunkMatch4.1.7
ORsplunksplunkMatch4.1.8
ORsplunksplunkMatch4.2
ORsplunksplunkMatch4.2.
ORsplunksplunkMatch4.2.1
ORsplunksplunkMatch4.2.2
ORsplunksplunkMatch4.2.3
ORsplunksplunkMatch4.2.4
ORsplunksplunkMatch4.2.5
ORsplunksplunkMatch4.3
ORsplunksplunkMatch4.3.1
ORsplunksplunkMatch4.3.2
ORsplunksplunkMatch4.3.3
ORsplunksplunkMatch4.3.4
ORsplunksplunkMatch4.3.5
ORsplunksplunkMatch4.3.6
ORsplunksplunkMatch4.3.7
ORsplunksplunkMatch5.0
ORsplunksplunkMatch5.0.1
ORsplunksplunkMatch5.0.2
ORsplunksplunkMatch5.0.3
ORsplunksplunkMatch5.0.4
Related
cve
cve
CVE-2013-6870
2022-10-03 16:14:52
CVE-2013-6998
2014-12-27 18:59:08
prion
prion
Cross site scripting
2013-11-25 19:55:00
Design/Logic Flaw
2014-12-27 18:59:00
nessus
nessus
Splunk < 5.0.6 Unspecified XSS
2013-11-27 00:00:00
cvelist
cvelist
CVE-2013-6870
2022-10-03 16:14:52
nvd
nvd
CVE-2013-6998
2014-12-27 18:59:08
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.7%
Related for NVD:CVE-2013-6870