CVE-2016-10126

🗓️ 10 Jan 2017 11:00:00Reported by mitreType

Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840

Reporter	Title	Published	Views	Family All 6
CNVD	Splunk Enterprise Information Disclosure Vulnerability	13 Jan 201700:00	–	cnvd
Cvelist	CVE-2016-10126	10 Jan 201711:00	–	cvelist
EUVD	EUVD-2016-1317	7 Oct 202500:30	–	euvd
NVD	CVE-2016-10126	10 Jan 201711:59	–	nvd
OpenVAS	Splunk Enterprise HTTP Request Injection Vulnerability (SP-CAAAPSR)	24 Jan 201700:00	–	openvas
Prion	Server side request forgery (ssrf)	10 Jan 201711:59	–	prion

NVD

Node

splunk splunkMatch5.0.0enterprise

splunk splunkMatch5.0.1enterprise

splunk splunkMatch5.0.2enterprise

splunk splunkMatch5.0.3enterprise

splunk splunkMatch5.0.4enterprise

splunk splunkMatch5.0.5enterprise

splunk splunkMatch5.0.6enterprise

splunk splunkMatch5.0.7enterprise

splunk splunkMatch5.0.8enterprise

splunk splunkMatch5.0.9enterprise

splunk splunkMatch5.0.10enterprise

splunk splunkMatch5.0.11enterprise

splunk splunkMatch5.0.12enterprise

splunk splunkMatch5.0.13enterprise

splunk splunkMatch5.0.14enterprise

splunk splunkMatch5.0.15enterprise

splunk splunkMatch5.0.16enterprise

Node

splunk splunkMatch6.0.0enterprise

splunk splunkMatch6.0.1enterprise

splunk splunkMatch6.0.2enterprise

splunk splunkMatch6.0.3enterprise

splunk splunkMatch6.0.4enterprise

splunk splunkMatch6.0.5enterprise

splunk splunkMatch6.0.6enterprise

splunk splunkMatch6.0.7enterprise

splunk splunkMatch6.0.8enterprise

splunk splunkMatch6.0.9enterprise

splunk splunkMatch6.0.10enterprise

splunk splunkMatch6.0.11enterprise

splunk splunkMatch6.0.12enterprise

Node

splunk splunkMatch6.1.0enterprise

splunk splunkMatch6.1.1enterprise

splunk splunkMatch6.1.2enterprise

splunk splunkMatch6.1.3enterprise

splunk splunkMatch6.1.4enterprise

splunk splunkMatch6.1.5enterprise

splunk splunkMatch6.1.6enterprise

splunk splunkMatch6.1.7enterprise

splunk splunkMatch6.1.8enterprise

splunk splunkMatch6.1.9enterprise

splunk splunkMatch6.1.10enterprise

splunk splunkMatch6.1.11enterprise

Node

splunk splunkMatch6.2.0enterprise

splunk splunkMatch6.2.1enterprise

splunk splunkMatch6.2.2enterprise

splunk splunkMatch6.2.3enterprise

splunk splunkMatch6.2.4enterprise

splunk splunkMatch6.2.5enterprise

splunk splunkMatch6.2.6enterprise

splunk splunkMatch6.2.7enterprise

splunk splunkMatch6.2.8enterprise

splunk splunkMatch6.2.9enterprise

splunk splunkMatch6.2.10enterprise

splunk splunkMatch6.2.11enterprise

Node

splunk splunkMatch6.3.0enterprise

splunk splunkMatch6.3.1enterprise

splunk splunkMatch6.3.2enterprise

splunk splunkMatch6.3.3enterprise

splunk splunkMatch6.3.4enterprise

splunk splunkMatch6.3.5enterprise

splunk splunkMatch6.3.6enterprise

splunk splunkMatch6.3.7enterprise

Node

splunk splunkMatch6.4.0enterprise

splunk splunkMatch6.4.1enterprise

splunk splunkMatch6.4.2enterprise

splunk splunkMatch6.4.3enterprise

Source	Link
splunk	www.splunk.com/view/SP-CAAAPSR
securityfocus	www.securityfocus.com/bid/95412

06 May 2026 22:30Current

9.3High risk

Vulners AI Score9.3

CVSS 39.8

CVSS 210

EPSS0.01373

CWE-264