CVE-2010-2429

Published: Jun 24, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response.

Affected (15)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

15 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Splunk Splunk	Version 4.0.10
Splunk Splunk	Version 4.0.11
Splunk Splunk	Version 4.0.1
Splunk Splunk	Version 4.0.2
Splunk Splunk	Version 4.0.3
Splunk Splunk	Version 4.0.4
Splunk Splunk	Version 4.0.5
Splunk Splunk	Version 4.0.6
Splunk Splunk	Version 4.0.7
Splunk Splunk	Version 4.0.8
Splunk Splunk	Version 4.0.9
Splunk Splunk	Version 4.0
Splunk Splunk	Version 4.1.1
Splunk Splunk	Version 4.1.2
Splunk Splunk	Version 4.1