Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-5197

Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI, related to search ids.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.3%
CVSS Severity
CVSS v2 Score 4.0
Products affected by CVE-2014-5197
  • Splunk » Splunk » Version: 6.1
    cpe:2.3:a:splunk:splunk:6.1
  • Splunk » Splunk » Version: 6.1.1
    cpe:2.3:a:splunk:splunk:6.1.1
  • Splunk » Splunk » Version: 6.1.2
    cpe:2.3:a:splunk:splunk:6.1.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved