Approved changes feed: RSS · Atom

cpe:2.3:a:splunk:splunk:6.2.1:*:*:*:light:*:*:*

part: a version: 6.2.1 update: *

VendorSplunk (0f7ef08f-e3f5-59a4-ba5f-26afb7835b46)
ProductSplunk (22a1d8ad-9b0f-51c8-ad24-657c0c14204c)
Edition*
Language*
Software editionlight
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7604 vulnerable 2026-06-03 14:35:09.516863 Details available
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6 and Splunk Light 6.2.x before 6.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-09-29T19:00:00.000Z
Updated: 2024-09-16T19:24:30.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6515 vulnerable 2026-06-03 14:35:02.380658 Details available
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.4, 6.1.x before 6.1.8, 6.0.x before 6.0.9, and 5.0.x before 5.0.13 and Splunk Light 6.2.x before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via a header.
Published: 2015-08-18T15:00:00.000Z
Updated: 2024-09-16T17:38:14.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6514 vulnerable 2026-06-03 14:35:02.362481 Details available
Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Enterprise 6.2.x before 6.2.4 and Splunk Light 6.2.x before 6.2.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2015-08-18T15:00:00.000Z
Updated: 2024-09-16T20:07:04.560Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.