CVSS: 9.0EPSS: 0%CPEs: 5EXPL: 0CVE-2013-7394
https://notcve.org/view.php?id=CVE-2013-7394
The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types. La secuencia de comandos 'runshellscript echo.sh' en Splunk anterior a 5.0.5 permite a usuarios remotos autenticados ejecutar código arbitrario a través de una cadena manipulada. NOTE: este problema fue dividido (SPLIT) del CVE-2013-6771 por ADT2 debido a tipos de vulnerabilidades diferentes. • http://www.splunk.com/view/SP-CAAAH76 http://zerodayinitiative.com/advisories/ZDI-14-053 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 9.3EPSS: 95%CPEs: 5EXPL: 0CVE-2013-6771 – Splunk runshellscript echo.sh Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2013-6771
Directory traversal vulnerability in the collect script in Splunk before 5.0.5 allows remote attackers to execute arbitrary commands via a .. (dot dot) in the file parameter. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7394 is for the issue in the "runshellscript echo.sh" script. Vulnerabilidad de salto de directorio en la secuencia de comandos collect en Splunk anterior a 5.0.5 permite a atacantes remotos ejecutar comandos arbitrarios a través de un .. • http://www.splunk.com/view/SP-CAAAH76 http://zerodayinitiative.com/advisories/ZDI-14-052 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 4.3EPSS: 0%CPEs: 8EXPL: 0CVE-2014-2578
https://notcve.org/view.php?id=CVE-2014-2578
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en Splunk Web en Splunk anterior a 5.0.8 permite a atacantes remotos inyectar script Web o HTML arbitrarios a través de vectores no especificados. • http://secunia.com/advisories/57554 http://www.securityfocus.com/bid/66453 http://www.securitytracker.com/id/1029966 http://www.splunk.com/view/SP-CAAAKQX https://exchange.xforce.ibmcloud.com/vulnerabilities/92126 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 80EXPL: 0CVE-2013-6870
https://notcve.org/view.php?id=CVE-2013-6870
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en Splunk Web de Splunk anterior a la versión 5.0.6 permite a atacantes remotos inyectar script web o HTML arbitrario a través de vectores sin especificar. • http://secunia.com/advisories/55774 http://www.securitytracker.com/id/1029385 http://www.splunk.com/view/SP-CAAAJCD • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.3EPSS: 0%CPEs: 65EXPL: 4CVE-2011-4644 – Splunk - Remote Command Execution
https://notcve.org/view.php?id=CVE-2011-4644
Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request. Splunk versión 4.2.5 y anteriores, cuando se selecciona una licencia Gratuita, habilita funciones potencialmente indeseables en un entorno que intencionalmente no admite la autenticación, lo que permite a los atacantes remotos (1) leer archivos arbitrarios por medio de una sesión de la consola de administración que aprovecha la capacidad de crear fuentes de datos diseñados, o (2) ejecutar comandos de administración por medio de una petición HTTP. • https://www.exploit-db.com/exploits/18245 http://www.exploit-db.com/exploits/18245 http://www.sec-1.com/blog/?p=233 http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf • CWE-287: Improper Authentication •