Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2024-36994MEDIUMPersistent Cross-site Scripting (XSS) in Dashboard ElementsEPSS 0.3%CVE-2026-76324MEDIUMStored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk EnterpriseEPSS 0.3%CVE-2026-76256MEDIUMInformation Exposure through REST API Endpoints in Splunk Secure GatewayEPSS 0.3%CVE-2026-76265MEDIUMImproper Access Control through REST API Endpoints in Splunk Secure GatewayEPSS 0.3%CVE-2025-20323MEDIUMMissing Access Control of Saved Searches in the Splunk Archiver appEPSS 0.3%CVE-2025-20300MEDIUMImproper Access Control Lets Low-Privilege Users Suppress Read-Only Alerts in Splunk EnterpriseEPSS 0.3%CVE-2026-76368LOWMissing Authorization through Playbooks in Splunk SOAREPSS 0.3%CVE-2026-76361LOWServer-Side Request Forgery (SSRF) through the Connectivity Check REST API in Splunk SOAREPSS 0.3%CVE-2026-76309MEDIUMStructured Query Language (SQL) Injection through the REST API in Splunk EnterpriseEPSS 0.3%CVE-2025-20385LOWStored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk EnterpriseEPSS 0.3%CVE-2026-76375MEDIUMInformation Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAREPSS 0.3%CVE-2026-76374MEDIUMInformation Disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAREPSS 0.3%CVE-2024-53243MEDIUMInformation Disclosure in Mobile Alert Responses in Splunk Secure GatewayEPSS 0.3%CVE-2026-20257MEDIUMImproper Input Validation through Classic Dashboard CSS in Splunk EnterpriseEPSS 0.3%CVE-2026-76255MEDIUMRisky Command Safeguards Bypass through Splunk Web in Splunk EnterpriseEPSS 0.3%CVE-2024-36987MEDIUMInsecure File Upload in the indexing/preview REST endpointEPSS 0.3%CVE-2026-76261MEDIUMInsecure Default Access Control List through the REST API in Splunk Secure GatewayEPSS 0.3%CVE-2026-76251HIGHMissing Authorization through REST API Endpoints in the Splunk App for Splunk Observability CloudEPSS 0.3%CVE-2026-76530HIGHUse of Non-Canonical URL Paths for Authorization Decisions in Splunk SOAREPSS 0.3%CVE-2026-76320MEDIUMSPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk EnterpriseEPSS 0.3%