CVE-2016-10126

🗓️ 10 Jan 2017 11:59:00Reported by [email protected]Type

Splunk Enterprise versions 5.0.x to 6.4.x allow HTTP request injection attacks, exposing sensitive REST API authentication-token information (CVE-2016-10126)

Reporter	Title	Published	Views	Family All 7
BDU FSTEC	The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to disclose protected information.	21 Dec 201700:00	–	bdu_fstec
CNVD	Splunk Enterprise Information Disclosure Vulnerability	13 Jan 201700:00	–	cnvd
CVE	CVE-2016-10126	10 Jan 201711:00	–	cve
Cvelist	CVE-2016-10126	10 Jan 201711:00	–	cvelist
EUVD	EUVD-2016-1317	7 Oct 202500:30	–	euvd
OpenVAS	Splunk Enterprise HTTP Request Injection Vulnerability (SP-CAAAPSR)	24 Jan 201700:00	–	openvas
Prion	Server side request forgery (ssrf)	10 Jan 201711:59	–	prion

NVD

Node

splunk splunkMatch5.0.0enterprise

splunk splunkMatch5.0.1enterprise

splunk splunkMatch5.0.2enterprise

splunk splunkMatch5.0.3enterprise

splunk splunkMatch5.0.4enterprise

splunk splunkMatch5.0.5enterprise

splunk splunkMatch5.0.6enterprise

splunk splunkMatch5.0.7enterprise

splunk splunkMatch5.0.8enterprise

splunk splunkMatch5.0.9enterprise

splunk splunkMatch5.0.10enterprise

splunk splunkMatch5.0.11enterprise

splunk splunkMatch5.0.12enterprise

splunk splunkMatch5.0.13enterprise

splunk splunkMatch5.0.14enterprise

splunk splunkMatch5.0.15enterprise

splunk splunkMatch5.0.16enterprise

Node

splunk splunkMatch6.0.0enterprise

splunk splunkMatch6.0.1enterprise

splunk splunkMatch6.0.2enterprise

splunk splunkMatch6.0.3enterprise

splunk splunkMatch6.0.4enterprise

splunk splunkMatch6.0.5enterprise

splunk splunkMatch6.0.6enterprise

splunk splunkMatch6.0.7enterprise

splunk splunkMatch6.0.8enterprise

splunk splunkMatch6.0.9enterprise

splunk splunkMatch6.0.10enterprise

splunk splunkMatch6.0.11enterprise

splunk splunkMatch6.0.12enterprise

Node

splunk splunkMatch6.1.0enterprise

splunk splunkMatch6.1.1enterprise

splunk splunkMatch6.1.2enterprise

splunk splunkMatch6.1.3enterprise

splunk splunkMatch6.1.4enterprise

splunk splunkMatch6.1.5enterprise

splunk splunkMatch6.1.6enterprise

splunk splunkMatch6.1.7enterprise

splunk splunkMatch6.1.8enterprise

splunk splunkMatch6.1.9enterprise

splunk splunkMatch6.1.10enterprise

splunk splunkMatch6.1.11enterprise

Node

splunk splunkMatch6.2.0enterprise

splunk splunkMatch6.2.1enterprise

splunk splunkMatch6.2.2enterprise

splunk splunkMatch6.2.3enterprise

splunk splunkMatch6.2.4enterprise

splunk splunkMatch6.2.5enterprise

splunk splunkMatch6.2.6enterprise

splunk splunkMatch6.2.7enterprise

splunk splunkMatch6.2.8enterprise

splunk splunkMatch6.2.9enterprise

splunk splunkMatch6.2.10enterprise

splunk splunkMatch6.2.11enterprise

Node

splunk splunkMatch6.3.0enterprise

splunk splunkMatch6.3.1enterprise

splunk splunkMatch6.3.2enterprise

splunk splunkMatch6.3.3enterprise

splunk splunkMatch6.3.4enterprise

splunk splunkMatch6.3.5enterprise

splunk splunkMatch6.3.6enterprise

splunk splunkMatch6.3.7enterprise

Node

splunk splunkMatch6.4.0enterprise

splunk splunkMatch6.4.1enterprise

splunk splunkMatch6.4.2enterprise

splunk splunkMatch6.4.3enterprise

Source	Link
splunk	www.splunk.com/view/SP-CAAAPSR
securityfocus	www.securityfocus.com/bid/95412

17 Jun 2026 00:39Current

9.4High risk

Vulners AI Score9.4

CVSS 39.8

CVSS 210

EPSS0.03989

CWE-264