CVE-2018-7427
23.10.2018, 21:31
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| splunk | splunk | 𝑥 < 6.6.0 |
| splunk | splunk | 6.0.0 ≤ 𝑥 < 6.0.14 |
| splunk | splunk | 6.1.0 ≤ 𝑥 < 6.1.13 |
| splunk | splunk | 6.2.0 ≤ 𝑥 < 6.2.14 |
| splunk | splunk | 6.3.0 ≤ 𝑥 < 6.3.10 |
| splunk | splunk | 6.4.0 ≤ 𝑥 < 6.4.7 |
| splunk | splunk | 6.5.0 ≤ 𝑥 < 6.5.3 |
𝑥
= Vulnerable software versions