CVE-2010-3322

2022-10-0316:20:55

mitre

www.cve.org

splunk

xml parser

sensitive information

privileges

xxe attack

8.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%

JSON

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors.

References

www.splunk.com/view/SP-CAAAFQ6