Vulnerabilidades en Splunk
337 resultadosCVE-2026-76339MEDIUMSPL Injection through the geostats Command in Splunk EnterpriseEPSS 0.2%CVE-2026-76346MEDIUMStored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk EnterpriseEPSS 0.2%CVE-2026-76392MEDIUMUse of Hard-coded Credentials in Container Connections in Splunk AI ToolkitEPSS 0.2%CVE-2026-76341MEDIUMRisky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk EnterpriseEPSS 0.2%CVE-2026-76342MEDIUMRisky Commands Safeguards Bypass through Splunk Web in Splunk EnterpriseEPSS 0.2%CVE-2024-45737MEDIUMMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)EPSS 0.2%CVE-2021-42743HIGHLocal privilege escalation via a default path in Splunk Enterprise WindowsEPSS 0.2%CVE-2026-76280MEDIUMIncorrect Permission Assignment for App Key Value Store Collections in Splunk Secure GatewayEPSS 0.2%CVE-2026-76267MEDIUMLog Injection through the REST API in Splunk App for Splunk O11y CloudEPSS 0.2%CVE-2026-76279MEDIUMImproper Input Validation of Index Names through the collect Command in Splunk EnterpriseEPSS 0.2%CVE-2026-76273MEDIUMImproper Input Validation through the collect Command in Splunk EnterpriseEPSS 0.2%CVE-2026-76264MEDIUMImproper Authorization through the REST API in Splunk EnterpriseEPSS 0.2%CVE-2026-76306HIGHInformation Disclosure through REST API Query Filters in Splunk SOAREPSS 0.2%CVE-2024-23678HIGHDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk PartitionEPSS 0.2%CVE-2025-20322MEDIUMDenial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk EnterpriseEPSS 0.2%CVE-2026-20141MEDIUMImproper Access Control in Splunk Monitoring Console AppEPSS 0.2%CVE-2026-20265MEDIUMInsecure Default Domain Allowlist in Splunk AI ToolkitEPSS 0.2%CVE-2026-76272MEDIUMMissing Access Control through the REST API in Splunk Secure GatewayEPSS 0.2%CVE-2026-76362HIGHImproper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAREPSS 0.2%CVE-2024-36995MEDIUMLow-privileged user could create experimental itemsEPSS 0.2%