Splunk Security Vulnerabilities and Issues — Splunk CVE List

Lucene search

SplunkSplunk

2 matches found

CVE•added 2010/09/14 5:0 p.m.•46 views

CVE-2010-3323

Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.

4.6CVSS8.3AI score0.00391EPSS

CVE•added 2010/09/14 5:0 p.m.•37 views

CVE-2010-3322

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors.

8.8CVSS8.1AI score0.00568EPSS