CVE-2010-3322

8.8 highEPSS 1.0%

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2010-09-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk

References

http://www.splunk.com/view/SP-CAAAFQ6
http://www.splunk.com/view/SP-CAAAFQ6

Check your stack JSON