CVE-2016-10126

Published: Jan 10, 2017Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840.

Affected (66)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 5.0.0
Splunk Splunk	Version 5.0.10
Splunk Splunk	Version 5.0.11
Splunk Splunk	Version 5.0.12
Splunk Splunk	Version 5.0.13
Splunk Splunk	Version 5.0.14
Splunk Splunk	Version 5.0.15
Splunk Splunk	Version 5.0.16
Splunk Splunk	Version 5.0.1
Splunk Splunk	Version 5.0.2
Splunk Splunk	Version 5.0.3
Splunk Splunk	Version 5.0.4
Splunk Splunk	Version 5.0.5
Splunk Splunk	Version 5.0.6
Splunk Splunk	Version 5.0.7
Splunk Splunk	Version 5.0.8
Splunk Splunk	Version 5.0.9

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 6.0.0
Splunk Splunk	Version 6.0.10
Splunk Splunk	Version 6.0.11
Splunk Splunk	Version 6.0.12
Splunk Splunk	Version 6.0.1
Splunk Splunk	Version 6.0.2
Splunk Splunk	Version 6.0.3
Splunk Splunk	Version 6.0.4
Splunk Splunk	Version 6.0.5
Splunk Splunk	Version 6.0.6
Splunk Splunk	Version 6.0.7
Splunk Splunk	Version 6.0.8
Splunk Splunk	Version 6.0.9

Configuration C

12 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 6.1.0
Splunk Splunk	Version 6.1.10
Splunk Splunk	Version 6.1.11
Splunk Splunk	Version 6.1.1
Splunk Splunk	Version 6.1.2
Splunk Splunk	Version 6.1.3
Splunk Splunk	Version 6.1.4
Splunk Splunk	Version 6.1.5
Splunk Splunk	Version 6.1.6
Splunk Splunk	Version 6.1.7
Splunk Splunk	Version 6.1.8
Splunk Splunk	Version 6.1.9

Configuration D

12 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 6.2.0
Splunk Splunk	Version 6.2.10
Splunk Splunk	Version 6.2.11
Splunk Splunk	Version 6.2.1
Splunk Splunk	Version 6.2.2
Splunk Splunk	Version 6.2.3
Splunk Splunk	Version 6.2.4
Splunk Splunk	Version 6.2.5
Splunk Splunk	Version 6.2.6
Splunk Splunk	Version 6.2.7
Splunk Splunk	Version 6.2.8
Splunk Splunk	Version 6.2.9

Configuration E

8 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 6.3.0
Splunk Splunk	Version 6.3.1
Splunk Splunk	Version 6.3.2
Splunk Splunk	Version 6.3.3
Splunk Splunk	Version 6.3.4
Splunk Splunk	Version 6.3.5
Splunk Splunk	Version 6.3.6
Splunk Splunk	Version 6.3.7