CVE-2016-10126 in Splunk

सारांश

द्वारा VulDB • 23/05/2026

Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 09/01/2017
• प्रकटीकरण: 10/01/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-95112
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• CVSS: 9.8 (NVD)
• EPSS: 0.03989
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Transportation, Industry, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-10126
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-10126
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-10126/