CVE-2013-6772

Medium

Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking

mitre·CWE-1021·Published 2020-01-23

CVSS

4.3

EPSS

0.01

KEV

Exploits

cve.orgen

70 chars

Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking

NVDen

70 chars

Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking

NVDes

107 chars

Splunk versiones anteriores a 5.0.4, carece de X-Frame-Options que puede permitir un Secuestro del Cliqueo.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N
3.1	Primary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N