CVE-2018-11409
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 98%
from disclosure to weaponsame day
Published on NVDJun 8
1st PoCJun 6
metasploitJun 8
VulnCheck+1997d
Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/44865unverifiedcve_referencewww.exploit-db.com/exploits/44865/unverifiedvulncheckvulncheck.com/xdb/b728c2f98bd6unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.