Xxe

2010-09-1417:00:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.0%

JSON

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors.

CPENameOperatorVersion
splunkge4.0
splunkle4.1.4

CPE	Name	Operator	Version
	splunk	ge	4.0
	splunk	le	4.1.4

References

www.splunk.com/view/SP-CAAAFQ6