Filtered by vendor Splunk Subscriptions
Filtered by product Splunk Subscriptions
Total 143 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2016-10126 1 Splunk 1 Splunk 2024-11-21 N/A
Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840.
CVE-2013-6773 2 Microsoft, Splunk 2 Windows, Splunk 2024-11-21 7.8 High
Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate privileges
CVE-2013-6772 1 Splunk 1 Splunk 2024-11-21 4.3 Medium
Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking