Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76397HIGHImproper Access Control in Experiment History through the REST API in Splunk AI ToolkitEPSS 0.4%CVE-2026-76388HIGHPrivilege Escalation through Search Macro Permissions in Splunk Enterprise SecurityEPSS 0.4%CVE-2026-76394HIGHMissing Authorization in Container and Connection Management through the REST API in Splunk AI ToolkitEPSS 0.4%CVE-2026-76399HIGHIncorrect Permission Assignment for Scheduled Searches in Splunk AI ToolkitEPSS 0.4%CVE-2026-20252HIGHServer-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk EnterpriseEPSS 0.3%CVE-2026-20144MEDIUMSensitive Information Disclosure in ''_internal'' index in Splunk EnterpriseEPSS 0.3%CVE-2026-76274MEDIUMServer-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability CloudEPSS 0.3%CVE-2026-20142MEDIUMSensitive Information Disclosure in "_internal" index in Splunk EnterpriseEPSS 0.3%CVE-2026-20138MEDIUMSensitive Information Disclosure in "_internal" index in Splunk EnterpriseEPSS 0.3%CVE-2024-45734MEDIUMLow Privilege User can View Images on the Host Machine by using the PDF Export feature in Splunk Classic DashboardEPSS 0.3%CVE-2023-32712HIGHUnauthenticated Log Injection in Splunk EnterpriseEPSS 0.3%CVE-2026-76326MEDIUMStored Cross-Site Scripting through Dashboard Sparkline Tooltip Options in Splunk EnterpriseEPSS 0.3%CVE-2024-45735MEDIUMImproper Access Control for low-privileged user in Splunk Secure Gateway AppEPSS 0.3%CVE-2026-76258MEDIUMUse of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure GatewayEPSS 0.3%CVE-2026-76257MEDIUMMissing Authorization through REST API Endpoints in Splunk Secure GatewayEPSS 0.3%CVE-2026-76260MEDIUMIncorrect Permission Assignment for Critical Resource through the REST API in Splunk EnterpriseEPSS 0.3%CVE-2026-76336HIGHImproper Access Control through the REST API in Splunk EnterpriseEPSS 0.3%CVE-2026-76292MEDIUMMissing Authorization through REST API Endpoints in Splunk Secure GatewayEPSS 0.3%CVE-2026-76332HIGHSPL Injection through Splunk Web in Splunk EnterpriseEPSS 0.3%CVE-2026-76330HIGHSPL Injection through Monitoring Console Forwarder Filters in Splunk EnterpriseEPSS 0.3%