Vulnerabilidades en Splunk
337 resultadosCVE-2026-76252MEDIUMCross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk EnterpriseEPSS 0.3%CVE-2026-76329MEDIUMSPL Injection through Monitoring Console Dashboard Inputs in Splunk EnterpriseEPSS 0.3%CVE-2026-76327MEDIUMSPL Injection through Splunk Web in Splunk Secure GatewayEPSS 0.3%CVE-2026-76349MEDIUMSPL Injection through Splunk Web Form Tokens in Splunk EnterpriseEPSS 0.3%CVE-2026-76398MEDIUMImproper Access Control during Experiment History Deletion through the REST API in Splunk AI ToolkitEPSS 0.3%CVE-2026-76318MEDIUMStored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseEPSS 0.3%CVE-2023-4571HIGHUnauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)EPSS 0.3%CVE-2025-20378LOWOpen Redirect on Web Login endpoint in Splunk EnterpriseEPSS 0.3%CVE-2026-76373MEDIUMFilter Injection through Action Parameters in AD LDAP app for Splunk SOAREPSS 0.3%CVE-2026-20202MEDIUMImproper Input Validation during User Account Creation in Splunk EnterpriseEPSS 0.2%CVE-2026-76277MEDIUMImproper Input Validation of Native Splunk Usernames through the REST API in Splunk EnterpriseEPSS 0.2%CVE-2026-76403HIGHImproper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for KafkaEPSS 0.2%CVE-2025-20382LOWURL validation bypass through Views Dashboard in Splunk EnterpriseEPSS 0.2%CVE-2025-20373LOWSensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto NetworksEPSS 0.2%CVE-2026-20162MEDIUMStored Cross-Site Scripting (XSS) through Path Traversal in Splunk EnterpriseEPSS 0.2%CVE-2026-76276MEDIUMInformation Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk EnterpriseEPSS 0.2%CVE-2025-20381MEDIUMSPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP toolEPSS 0.2%CVE-2025-20228MEDIUMMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk EnterpriseEPSS 0.2%CVE-2026-20258HIGHStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk EnterpriseEPSS 0.2%CVE-2023-40597HIGHAbsolute Path Traversal in Splunk Enterprise Using runshellscript.pyEPSS 0.2%