Vulnerabilidades en Splunk
337 resultadosCVE-2024-45740MEDIUMPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk EnterpriseEPSS 0.4%CVE-2025-20367MEDIUMReflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk EnterpriseEPSS 0.4%CVE-2025-20368MEDIUMStored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk EnterpriseEPSS 0.4%CVE-2026-76285CRITICALImproper Adherence to Coding Standards in Splunk EnterpriseEPSS 0.4%CVE-2026-76353MEDIUMPath Traversal through Knowledge Bundle Replication in Splunk EnterpriseEPSS 0.4%CVE-2024-53245LOWInformation Disclosure due to Username Collision with a Role that has the same Name as the UserEPSS 0.4%CVE-2023-22931MEDIUM‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk EnterpriseEPSS 0.4%CVE-2023-32717MEDIUMRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search ResultsEPSS 0.4%CVE-2026-76528CRITICALProtection Mechanism Failure in Splunk SOAREPSS 0.4%CVE-2026-20256MEDIUMImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk EnterpriseEPSS 0.4%CVE-2026-76325HIGHStored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseEPSS 0.4%CVE-2023-22938MEDIUMPermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk EnterpriseEPSS 0.4%CVE-2026-76526HIGHImproper Neutralization in Splunk SOAREPSS 0.4%CVE-2026-76369LOWPath Traversal through Automation Broker in Splunk SOAREPSS 0.4%CVE-2024-36996MEDIUMInformation Disclosure of user namesEPSS 0.4%CVE-2026-76298HIGHUse of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk EnterpriseEPSS 0.4%CVE-2026-20255MEDIUMImproper Input Validation through Classic Dashboards in Splunk EnterpriseEPSS 0.4%CVE-2026-76271MEDIUMDenial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk EnterpriseEPSS 0.4%CVE-2026-76300HIGHSecurity Hardening in Splunk Enterprise - October 2026EPSS 0.4%CVE-2023-32711MEDIUMPersistent Cross-Site Scripting (XSS) through a URL Validation Bypass within a Dashboard ViewEPSS 0.4%