CVE-2013-6870: XSS
Published Nov 25, 2013
·Updated
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
80 affected components
Splunk splunk<=5.0.5
Splunk splunk=2.1
Splunk splunk=2.2
Splunk splunk=2.2.1
Splunk splunk=2.2.3
Splunk splunk=2.2.6
Splunk splunk=3.0
Splunk splunk=3.0.1
Splunk splunk=3.0.2
Splunk splunk=3.1
Splunk splunk=3.1.1
Splunk splunk=3.1.2
Splunk splunk=3.1.3
Splunk splunk=3.1.4
Splunk splunk=3.2
Splunk splunk=3.2.1
Splunk splunk=3.2.2
Splunk splunk=3.2.3
Splunk splunk=3.2.4
Splunk splunk=3.2.5
Splunk splunk=3.2.6
Splunk splunk=3.3
Splunk splunk=3.3.1
Splunk splunk=3.3.2
Splunk splunk=3.3.3
Splunk splunk=3.3.4
Splunk splunk=3.4
Splunk splunk=3.4.1
Splunk splunk=3.4.2
Splunk splunk=3.4.3
Splunk splunk=3.4.5
Splunk splunk=3.4.6
Splunk splunk=3.4.8
Splunk splunk=3.4.9
Splunk splunk=3.4.10
Splunk splunk=3.4.11
Splunk splunk=3.4.12
Splunk splunk=3.4.13
Splunk splunk=3.4.14
Splunk splunk=4.0
Splunk splunk=4.0.1
Splunk splunk=4.0.2
Splunk splunk=4.0.3
Splunk splunk=4.0.4
Splunk splunk=4.0.5
Splunk splunk=4.0.6
Splunk splunk=4.0.7
Splunk splunk=4.0.8
Splunk splunk=4.0.9
Splunk splunk=4.0.10
Splunk splunk=4.0.11
Splunk splunk=4.1
Splunk splunk=4.1.1
Splunk splunk=4.1.2
Splunk splunk=4.1.3
Splunk splunk=4.1.4
Splunk splunk=4.1.5
Splunk splunk=4.1.6
Splunk splunk=4.1.7
Splunk splunk=4.1.8
Splunk splunk=4.2
Splunk splunk=4.2.
Splunk splunk=4.2.1
Splunk splunk=4.2.2
Splunk splunk=4.2.3
Splunk splunk=4.2.4
Splunk splunk=4.2.5
Splunk splunk=4.3
Splunk splunk=4.3.1
Splunk splunk=4.3.2
Splunk splunk=4.3.3
Splunk splunk=4.3.4
Splunk splunk=4.3.5
Splunk splunk=4.3.6
Splunk splunk=4.3.7
Splunk splunk=5.0
Splunk splunk=5.0.1
Splunk splunk=5.0.2
Splunk splunk=5.0.3
Splunk splunk=5.0.4
Event History
Nov 25, 2013
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6870?
CVE-2013-6870 is classified as a medium-severity vulnerability due to its ability to allow remote attackers to execute arbitrary web scripts or HTML.
2
How do I fix CVE-2013-6870?
To fix CVE-2013-6870, upgrade to Splunk version 5.0.6 or later, which addresses the vulnerability.
3
What kind of attack can exploit CVE-2013-6870?
CVE-2013-6870 can be exploited through a Cross-Site Scripting (XSS) attack that allows for the injection of arbitrary web scripts.
4
Which versions of Splunk are affected by CVE-2013-6870?
CVE-2013-6870 affects multiple versions of Splunk prior to 5.0.6, including versions from 2.1 to 5.0.5.
5
Is there a public exploit for CVE-2013-6870?
As of now, there are no publicly available exploits specifically targeting CVE-2013-6870.