Vulnerabilidades en Splunk
337 resultadosCVE-2026-76262HIGHExposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk EnterpriseEPSS 0.5%CVE-2026-76355HIGHUnauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk EnterpriseEPSS 0.5%CVE-2026-76290HIGHDenial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk EnterpriseEPSS 0.5%CVE-2024-36982HIGHDenial of Service through null pointer reference in “cluster/config” REST endpointEPSS 0.5%CVE-2025-20386HIGHIncorrect permission assignment on Splunk Enterprise for Windows during new installation or upgradeEPSS 0.5%CVE-2025-20387HIGHIncorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgradeEPSS 0.5%CVE-2026-20239HIGHSensitive Information Disclosure through Log Files in Splunk EnterpriseEPSS 0.5%CVE-2025-20232MEDIUMRisky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk EnterpriseEPSS 0.5%CVE-2025-20226MEDIUMRisky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk EnterpriseEPSS 0.5%CVE-2024-45738MEDIUMSensitive information disclosure in REST_Calls logging channelEPSS 0.5%CVE-2023-46231HIGHSession Token Disclosure to Internal Log Files in Splunk Add-on BuilderEPSS 0.5%CVE-2023-46213MEDIUMCross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search PageEPSS 0.5%CVE-2026-76288HIGHDenial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk EnterpriseEPSS 0.5%CVE-2024-53244MEDIUMRisky command safeguards bypass in “/en-US/app/search/report“ endpoint through “s“ parameterEPSS 0.5%CVE-2026-76293HIGHRemote Code Execution (RCE) through Splunk Web Manager Extensible Markup Language (XML) in Splunk EnterpriseEPSS 0.5%CVE-2025-20371HIGHUnauthenticated Blind Server Side Request Forgery (SSRF) in Splunk EnterpriseEPSS 0.5%CVE-2026-76391HIGHImproper Privilege Management through Agent Run History in Splunk AI ToolkitEPSS 0.5%CVE-2026-76338HIGHImproper Authentication through REST API Distributed Search Token Requests in Splunk EnterpriseEPSS 0.5%CVE-2025-20320MEDIUMDenial of Service (DoS) through “User Interface - Views“ configuration page in Splunk EnterpriseEPSS 0.5%CVE-2022-37437HIGHIngest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validationEPSS 0.5%