Vulnerabilidades en Splunk
337 resultadosCVE-2026-76333HIGHStored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk EnterpriseEPSS 0.3%CVE-2026-76323MEDIUMSPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk EnterpriseEPSS 0.3%CVE-2026-76299CRITICALSecurity Hardening in Splunk Enterprise - October 2026EPSS 0.3%CVE-2025-20383MEDIUMImproper access control through push notifications for reports and alerts in Splunk Secure Gateway appEPSS 0.3%CVE-2023-32713HIGHLocal Privilege Escalation via the ‘streamfwd’ program in Splunk App for StreamEPSS 0.3%CVE-2025-20230MEDIUMMissing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway AppEPSS 0.3%CVE-2026-20298MEDIUMSensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk EnterpriseEPSS 0.3%CVE-2024-23676MEDIUMSensitive Information Disclosure of Index Metrics through “mrollup” SPL CommandEPSS 0.3%CVE-2026-76396HIGHImproper Access Control through Scheduled Searches in Splunk AI ToolkitEPSS 0.3%CVE-2026-76270MEDIUMStructured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk EnterpriseEPSS 0.3%CVE-2026-76406MEDIUMInformation Disclosure through REST API Authentication in Splunk SOAREPSS 0.3%CVE-2026-20238MEDIUMImproper Access Control through Role Inheritance in Splunk AI Toolkit appEPSS 0.3%CVE-2026-76348LOWMissing Authorization in Search Head Cluster Member Controls in Splunk EnterpriseEPSS 0.3%CVE-2026-76322MEDIUMSPL Injection through Dashboard Studio Search Query Options in Splunk EnterpriseEPSS 0.3%CVE-2023-22943MEDIUMModular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDKEPSS 0.3%CVE-2023-32715MEDIUMSelf Cross-Site Scripting (XSS) on Splunk App for Lookup File EditingEPSS 0.3%CVE-2025-20369MEDIUMExtensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk EnterpriseEPSS 0.3%CVE-2024-36992MEDIUMPersistent Cross-site Scripting (XSS) in Dashboard ElementsEPSS 0.3%CVE-2025-20298HIGHIncorrect permission assignment on Universal Forwarder for Windows during new installation or upgradeEPSS 0.3%CVE-2025-20379LOWRisky command safeguards bypass using the “/services/streams/search“ REST endpoint through “q“ parameter in Splunk EnterpriseEPSS 0.3%