CVE-2016-4859

CVE-2016-4859 is an open redirect vulnerability affecting Splunk Enterprise (versions 6.0.x–6.4.x with pre-6.0.12, pre-6.1.11, pre-6.2.10, pre-6.3.6, pre-6.4.3) and Splunk Light (pre-6.4.3). An attacker could craft a URL that redirects a user to an arbitrary site, facilitating phishing. Supported...

CVE-2016-4859

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior ...

CVE-2016-4858

CVE-2016-4858 is a cross-site scripting vulnerability in Splunk Enterprise and Splunk Light. Affected versions include Splunk Enterprise 6.4.x before 6.4.2, 6.3.x before 6.3.6, 6.2.x before 6.2.10, 6.1.x before 6.1.11, 6.0.x before 6.0.12, 5.0.x before 5.0.16, and Splunk Light before 6.4.2. Root ...

PT-2017-8557

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 5.0.x prior to 5.0.16 Splunk Enterprise versions 6.0.x prior to 6.0.12 Splunk Enterprise versions 6.1.x prior to 6.1.11 Splunk Enterprise versions 6.2.x prior to 6.2.10 Splunk Enterprise versions 6.3.x prior to 6.3.6...

PT-2017-8554

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 6.3.0 through 6.3.4 Splunk Light versions 6.3.0 through 6.3.4 Description A cross-site scripting issue allows an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4859: URL Redirection to Untrusted Site

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior ...

CVE-2016-4856: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-8555

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 6.2.x through 6.2.10 Splunk Enterprise versions 6.3.x through 6.3.5 Splunk Enterprise versions 6.4.x through 6.4.1 Splunk Light versions prior to 6.4.2 Description The issue allows attackers to redirect users to...

CVE-2016-4858: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light...

CVE-2016-4857: URL Redirection to Untrusted Site

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2017-8556

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 5.0.x prior to 5.0.16 Splunk Enterprise versions 6.0.x prior to 6.0.12 Splunk Enterprise versions 6.1.x prior to 6.1.11 Splunk Enterprise versions 6.2.x prior to 6.2.10 Splunk Enterprise versions 6.3.x prior to 6.3.6...

Splunk Enterprise 6.4.x < 6.4.7 Multiple Vulnerabilities

According to its self-reported version number, the version of Splunk Enterprise running on the remote web server is 6.4.x prior to 6.4.7. It is, therefore, affected by multiple vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist due to improper validation of user-supplied...

Get a Single View of WAF Events with the Imperva AppSecurity View App for Splunk Enterprise

Enterprises are adopting a hybrid infrastructure model to take advantage of rapid deployment of cloud-based services and higher computing power. A compilation of analyst predictions by SecureWorks, shows that the cloud continues to gain momentum as organizations embrace and benefit from new ways ...

CVE-2017-5607

Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to...

CVE-2017-5607

CVE-2017-5607 affects Splunk Enterprise and Splunk Light where the JavaScript global window property $C is assigned on certain pages, enabling information disclosure. Affected versions include Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, ...

PT-2017-16612

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 5.0.x through 5.0.17 Splunk Enterprise versions 6.0.x through 6.0.13 Splunk Enterprise versions 6.1.x through 6.1.12 Splunk Enterprise versions 6.2.x through 6.2.13 Splunk Enterprise versions 6.3.x through 6.3.9 Splu...

CVE-2017-5607: Exposure of Sensitive Information to an Unauthorized Actor

Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to...

Splunk Enterprise Information Theft (CVE-2017-5607)

Product: Splunk Enterprise Splunk provides the leading platform for Operational Intelligence. Customers use Splunk to search, monitor, analyze and visualize machine data. Splunk Enterprise, collects and analyzes high volumes of machine-generated data. Vulnerability Type: Javascript JSON Informati...

Splunk Enterprise Information Disclosure Vulnerability (SP-CAAAPZ3)

Splunk Enterprise is prone to an information disclosure vulnerability via JavaScript. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Splunk Enterprise XSS Vulnerability (SP-CAAAPZ3)

Splunk Enterprise is prone to a persistent cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...