CVE-2013-6870

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.securitytracker.com/id/1029385
http://www.splunk.com/view/SP-CAAAJCD	Vendor Advisory
http://secunia.com/advisories/55774	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:splunk:splunk:5.0.3:::::::*
	cpe:2.3:a:splunk:splunk:5.0.1:::::::*
	cpe:2.3:a:splunk:splunk:4.3.7:::::::*
	cpe:2.3:a:splunk:splunk:5.0:::::::*
	cpe:2.3:a:splunk:splunk::::::::
	cpe:2.3:a:splunk:splunk:5.0.4:::::::*
	cpe:2.3:a:splunk:splunk:4.2.2:::::::*
	cpe:2.3:a:splunk:splunk:4.2.1:::::::*
	cpe:2.3:a:splunk:splunk:4.2.:::::::*
	cpe:2.3:a:splunk:splunk:4.2:::::::*
	cpe:2.3:a:splunk:splunk:4.0.5:::::::*
	cpe:2.3:a:splunk:splunk:4.0.4:::::::*
	cpe:2.3:a:splunk:splunk:4.1.2:::::::*
	cpe:2.3:a:splunk:splunk:4.1.1:::::::*
	cpe:2.3:a:splunk:splunk:4.3.1:::::::*
	cpe:2.3:a:splunk:splunk:3.4.9:::::::*
	cpe:2.3:a:splunk:splunk:4.0.3:::::::*
	cpe:2.3:a:splunk:splunk:3.4.10:::::::*
	cpe:2.3:a:splunk:splunk:4.1.3:::::::*
	cpe:2.3:a:splunk:splunk:3.4.8:::::::*
	cpe:2.3:a:splunk:splunk:3.1.1:::::::*
	cpe:2.3:a:splunk:splunk:3.4.11:::::::*
	cpe:2.3:a:splunk:splunk:3.1.2:::::::*
	cpe:2.3:a:splunk:splunk:4.3.4:::::::*
	cpe:2.3:a:splunk:splunk:4.3.3:::::::*
	cpe:2.3:a:splunk:splunk:3.4:::::::*
	cpe:2.3:a:splunk:splunk:4.3.2:::::::*
	cpe:2.3:a:splunk:splunk:4.1.4:::::::*
	cpe:2.3:a:splunk:splunk:3.4.12:::::::*
	cpe:2.3:a:splunk:splunk:4.0.2:::::::*
	cpe:2.3:a:splunk:splunk:3.1.3:::::::*
	cpe:2.3:a:splunk:splunk:3.1.4:::::::*
	cpe:2.3:a:splunk:splunk:3.4.1:::::::*
	cpe:2.3:a:splunk:splunk:3.3.1:::::::*
	cpe:2.3:a:splunk:splunk:2.1:::::::*
	cpe:2.3:a:splunk:splunk:3.3.4:::::::*
	cpe:2.3:a:splunk:splunk:4.0.6:::::::*
	cpe:2.3:a:splunk:splunk:3.2:::::::*
	cpe:2.3:a:splunk:splunk:4.2.3:::::::*
	cpe:2.3:a:splunk:splunk:4.0:::::::*
	cpe:2.3:a:splunk:splunk:3.4.13:::::::*
	cpe:2.3:a:splunk:splunk:3.0.1:::::::*
	cpe:2.3:a:splunk:splunk:3.3.2:::::::*
	cpe:2.3:a:splunk:splunk:4.1.8:::::::*
	cpe:2.3:a:splunk:splunk:3.2.3:::::::*
	cpe:2.3:a:splunk:splunk:5.0.2:::::::*
	cpe:2.3:a:splunk:splunk:2.2.3:::::::*
	cpe:2.3:a:splunk:splunk:3.2.2:::::::*
	cpe:2.3:a:splunk:splunk:3.4.3:::::::*
	cpe:2.3:a:splunk:splunk:2.2.1:::::::*
	cpe:2.3:a:splunk:splunk:4.0.8:::::::*
	cpe:2.3:a:splunk:splunk:4.3.6:::::::*
	cpe:2.3:a:splunk:splunk:4.1.5:::::::*
	cpe:2.3:a:splunk:splunk:4.0.9:::::::*
	cpe:2.3:a:splunk:splunk:3.4.6:::::::*
	cpe:2.3:a:splunk:splunk:3.1:::::::*
	cpe:2.3:a:splunk:splunk:3.2.5:::::::*
	cpe:2.3:a:splunk:splunk:4.3:::::::*
	cpe:2.3:a:splunk:splunk:4.0.11:::::::*
	cpe:2.3:a:splunk:splunk:3.4.5:::::::*
	cpe:2.3:a:splunk:splunk:4.2.4:::::::*
	cpe:2.3:a:splunk:splunk:3.4.14:::::::*
	cpe:2.3:a:splunk:splunk:4.2.5:::::::*
	cpe:2.3:a:splunk:splunk:3.2.6:::::::*
cpe:2.3:a:splunk:splunk:4.0.10:::::::*
cpe:2.3:a:splunk:splunk:3.3:::::::*
cpe:2.3:a:splunk:splunk:4.1.7:::::::*
cpe:2.3:a:splunk:splunk:3.4.2:::::::*
cpe:2.3:a:splunk:splunk:4.1:::::::*
cpe:2.3:a:splunk:splunk:4.0.1:::::::*
cpe:2.3:a:splunk:splunk:4.1.6:::::::*
cpe:2.3:a:splunk:splunk:4.0.7:::::::*
cpe:2.3:a:splunk:splunk:3.2.4:::::::*
cpe:2.3:a:splunk:splunk:3.3.3:::::::*
cpe:2.3:a:splunk:splunk:4.3.5:::::::*
cpe:2.3:a:splunk:splunk:2.2:::::::*
cpe:2.3:a:splunk:splunk:2.2.6:::::::*
cpe:2.3:a:splunk:splunk:3.0:::::::*
cpe:2.3:a:splunk:splunk:3.2.1:::::::*
cpe:2.3:a:splunk:splunk:3.0.2:::::::*

Information

Published : 2013-11-25 11:55

Updated : 2013-11-27 08:19

NVD link : CVE-2013-6870

Mitre link : CVE-2013-6870

JSON object : View

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Products Affected

splunk

splunk

4.3 /10