CVE-2014-5466

Cross-site scripting XSS vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5466

The CVE-2014-5466 issue concerns Splunk Enterprise’s Dashboard in Splunk Web (Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10). The root cause is an XSS flaw in the Dashboard caused by improper input validation in the web interface. This enables remote attackers ...

CVE-2014-5466

Cross-site scripting XSS vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-6494

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 5.0.x through 5.0.9 Splunk Enterprise versions 6.0.x through 6.0.6 Splunk Enterprise versions 6.1.x through 6.1.3 Description A cross-site scripting XSS issue exists in the Dashboard of Splunk Web, allowing remote...

CVE-2014-5466: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Splunk Enterprise 5.0.x < 5.0.10 / 6.1.x < 6.1.4 Multiple Vulnerabilities

According to its version number, the Splunk Enterprise hosted on the remote web server is 5.0.x prior to 5.0.10 or 6.1.x prior to 6.1.4. It is, therefore, affected by the following vulnerabilities : - The included OpenSSL library contains a TLS downgrade weakness. By using fragmented ClientHello...

Splunk Enterprise 6.0.x < 6.0.7 Multiple Vulnerabilities (POODLE)

According to its version number, the Splunk Enterprise hosted on the remote web server is 6.0.x prior to 6.0.7. It is, therefore, affected by the following vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles...

Splunk Enterprise 6.0.x < 6.0.6 Multiple Vulnerabilities

According to its version number, the Splunk Enterprise hosted on the remote web server is 6.0.x prior to 6.0.6. It is, therefore, affected by the following vulnerabilities : - The included OpenSSL library contains a TLS downgrade weakness. By using fragmented ClientHello messages, a remote,...

Splunk Enterprise 5.0.x < 5.0.11 Multiple Vulnerabilities (POODLE)

According to its version number, the Splunk Enterprise hosted on the remote web server is 5.0.x prior to 5.0.11. It is, therefore, affected by the following vulnerabilities : - A man-in-the-middle MitM information disclosure vulnerability, known as POODLE, exists due to the way SSL 3.0 handles...

CVE-2014-8303

Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to event parsing...

CVE-2014-8301

Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header...

Cross site scripting

Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header...

Cross site scripting

Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via vectors related to dashboard...

CVE-2014-8301

CVE-2014-8301 is a cross-site scripting (XSS) vulnerability in Splunk Web of Splunk Enterprise 5.0.x prior to 5.0.10. The issue arises from improper handling/validation of the HTTP Referer header, allowing remote attackers to inject arbitrary web script or HTML into a user’s browser session. The ...

CVE-2014-8302

Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via vectors related to dashboard...

CVE-2014-8303

Cross-site scripting XSS vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to event parsing...

CVE-2014-8302

CVE-2014-8302 is a documented cross-site scripting (XSS) vulnerability in Splunk Web for Splunk Enterprise. Affected are Splunk Web dashboards in: 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10. The issue arises from improper validation in the dashboard-related components, allowi...

CVE-2014-8303

CVE-2014-8303 is a documented cross-site scripting (XSS) vulnerability in Splunk Web for Splunk Enterprise 6.1.x before 6.1.4 and 6.0.x before 6.0.6. The issue allows a remote attacker to inject arbitrary web script or HTML via vectors related to event parsing. The NVD entry provides a base score...

PT-2014-8451

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 5.0.x through 5.0.9 Splunk Enterprise versions 6.0.x through 6.0.5 Splunk Enterprise versions 6.1.x through 6.1.3 Description A cross-site scripting XSS issue exists in Splunk Web, allowing remote attackers to inject...