CVE-2010-2504: Splunk

Medium severity, CVSS 6.0. EPSS: 0.9% chance of exploitation in the next 30 days.

Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.

Affected products

• Splunk Splunk: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2010-06-28. Last modified 2026-06-16.