Splunk 5.0.3
Approved changes feed: RSS · Atom
cpe:2.3:a:splunk:splunk:5.0.3:*:*:*:*:*:*:*
part: a version: 5.0.3 update: *
| Vendor | Splunk (0f7ef08f-e3f5-59a4-ba5f-26afb7835b46) |
|---|---|
| Product | Splunk (22a1d8ad-9b0f-51c8-ad24-657c0c14204c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-8302 |
vulnerable | 2026-06-03 14:34:23.533208 |
Details available
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.6, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via vectors related to dashboard.
Published: 2014-10-16T19:00:00.000Z
Updated: 2024-09-16T16:43:09.591Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8301 |
vulnerable | 2026-06-03 14:34:23.529556 |
Details available
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header.
Published: 2014-10-16T19:00:00.000Z
Updated: 2024-09-16T20:32:08.852Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5466 |
vulnerable | 2026-06-03 14:34:06.530503 |
Details available
Cross-site scripting (XSS) vulnerability in the Dashboard in Splunk Web in Splunk Enterprise 6.1.x before 6.1.4, 6.0.x before 6.0.7, and 5.0.x before 5.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-12-16T18:00:00.000Z
Updated: 2024-08-06T11:48:49.501Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2578 |
vulnerable | 2026-06-03 14:33:51.340202 |
Details available
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-04-02T14:00:00.000Z
Updated: 2024-08-06T10:21:35.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7394 |
vulnerable | 2026-06-03 14:33:35.690188 |
Details available
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.
Published: 2014-08-07T10:00:00.000Z
Updated: 2024-08-06T18:09:16.444Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6870 |
vulnerable | 2026-06-03 14:33:32.830392 |
Details available
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-11-25T19:00:00.000Z
Updated: 2024-09-17T01:06:10.198Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6771 |
vulnerable | 2026-06-03 14:33:32.559245 |
Details available
Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script.
Published: 2014-08-07T10:00:00.000Z
Updated: 2024-08-06T17:46:23.468Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.