Vulnerabilities > Splunk > Splunk > 5.0

DATE CVE VULNERABILITY TITLE RISK
2014-01-23 CVE-2012-6447 Cross-Site Scripting vulnerability in Splunk 5.0/5.0.1/5.0.2
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
splunk CWE-79
4.3
2013-11-25 CVE-2013-6870 Cross-Site Scripting vulnerability in Splunk
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
network
splunk CWE-79
4.3