Approved changes feed: RSS · Atom

cpe:2.3:a:splunk:splunk:6.3.8:*:*:*:enterprise:*:*:*

part: a version: 6.3.8 update: *

VendorSplunk (0f7ef08f-e3f5-59a4-ba5f-26afb7835b46)
ProductSplunk (22a1d8ad-9b0f-51c8-ad24-657c0c14204c)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5880 vulnerable 2026-06-03 14:37:26.573451 Details available
Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.0.17 and Splunk Light versions before 6.5.2 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted GET request, aka SPL-130279.
Published: 2017-02-04T05:20:00.000Z
Updated: 2024-08-05T15:11:48.737Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12572 vulnerable 2026-06-03 14:36:36.163681 Details available
Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104.
Published: 2017-08-05T21:00:00.000Z
Updated: 2024-09-17T00:41:23.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.