Splunk Enterprise and Splunk Light vulnerable to open redirect

Overview Splunk Enterprise and Splunk Light contain an open redirect vulnerability. Note that this vulnerability is different from JVN64800312. Noriaki Iwasaki of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

JVN#74244518: Splunk Enterprise and Splunk Light vulnerable to cross-site scripting

Splunk Enterprise and Splunk Light contain a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer. Products Affected Splunk...

JVN#64800312: Splunk Enterprise and Splunk Light vulnerable to open redirect

Splunk Enterprise and Splunk Light contain an open redirect vulnerability. Impact When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Update the Software Update to the latest version...

JVN#39926655: Splunk Enterprise and Splunk Light vulnerable to open redirect

Splunk Enterprise and Splunk Light contain an open redirect vulnerability. Impact When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Update the Software Update to the latest version...

Splunk Light Remote Detection

Detects the installed version of Splunk Light. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Splunk Light Open Redirection Vulnerability

Splunk Light is prone to an open redirection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:light";...

Splunk Enterprise < 5.0.16 / 6.0.12 / 6.1.11 / 6.2.10 / 6.3.6 / 6.4.3 or Splunk Light < 6.4.3 Cross-Site Redirection

According to its self-reported version number, the version of Splunk Enterprise hosted on the remote web server is 5.0.x prior to 5.0.16, 6.0.x prior to 6.0.12, 6.1.x prior to 6.1.11, 6.2.x prior to 6.2.10, 6.3.x prior to 6.3.6, or 6.4.x prior to 6.4.3; or else it is Splunk Light version 6.4.x...

CVE-2016-2298

Summary of CVE-2016-2298 (Meteocontrol WEB’log) : Affects WEB’log Basic 100, Light, Pro, and Pro Unlimited. The issue is Information Exposure via cleartext data stored or transmitted by the application, driven by an improper access control / authentication bypass vulnerability. Remote attackers c...

Splunk Enterprise < 5.0.15 / 6.0.11 / 6.1.10 / 6.2.9 / 6.3.3.4 or Splunk Light < 6.2.9 / 6.3.3.4 Multiple Vulnerabilities (DROWN)

According to its version number, the instance of Splunk hosted on the remote web server is Enterprise 5.0.x prior to 5.0.15, 6.0.x prior to 6.0.11, 6.1.x prior to 6.1.10, 6.2.x prior to 6.2.9, 6.3.x prior to 6.3.3.4, Light 6.2.x prior to 6.2.9, or Light 6.3.x prior to 6.3.3.4. It is, therefore,...

God of Light - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application God of Light published at the 'play' market has multiple vulnerabilities...

Flash light - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Flash light published at the 'play' market has multiple vulnerabilities...

Pivot Light Saber - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Pivot Light Saber published at the 'play' market has multiple vulnerabilities...

Disco Light™ LED Flashlight - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Disco Light™ LED Flashlight published at the 'play' market has multiple vulnerabilities...

Flash Light Alerts - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Flash Light Alerts published at the 'play' market has multiple vulnerabilities...

TF: Fast Light - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TF: Fast Light published at the 'play' market has multiple vulnerabilities...

Power Light - Flashlight LED - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Power Light - Flashlight LED published at the 'play' market has multiple vulnerabilities...

Clever Lotto Light - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Clever Lotto Light published at the 'play' market has multiple vulnerabilities...

Theme eXp - Black Z Light - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Theme eXp - Black Z Light published at the 'play' market has multiple vulnerabilities...

Sleep Tight Night Light - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Tight Night Light published at the 'play' market has multiple vulnerabilities...

Night Light - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Night Light published at the 'play' market has multiple vulnerabilities...