CVE-2010-3322: Splunk

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

The XML parser in Splunk 4.0.0 through 4.1.4 allows remote authenticated users to obtain sensitive information and gain privileges via an XML External Entity (XXE) attack to unknown vectors.

Affected products

• Splunk Splunk: from 4.0, up to and including 4.1.4

Published 2010-09-14. Last modified 2026-06-16.