Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76263MEDIUMImproper Access Control through the REST API in Splunk EnterpriseEPSS 0.3%CVE-2026-76347MEDIUMServer-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure GatewayEPSS 0.3%CVE-2023-3997HIGHUnauthenticated Log Injection In Splunk SOAREPSS 0.3%CVE-2024-53246MEDIUMSensitive Information Disclosure through SPL commandsEPSS 0.3%CVE-2026-76269MEDIUMImproper Access Control in Search Job Retrieval through the REST API in Splunk EnterpriseEPSS 0.3%CVE-2026-76328MEDIUMSPL Injection through Splunk Web in Splunk EnterpriseEPSS 0.3%CVE-2026-76371LOWIncorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAREPSS 0.3%CVE-2026-76295MEDIUMSPL Injection through the REST API in Splunk Secure GatewayEPSS 0.3%CVE-2026-20205HIGHSensitive Information Disclosure in ''_internal'' index in Splunk MCP Server appEPSS 0.3%CVE-2025-20324MEDIUMImproper Access Control in System Source Types Configuration in Splunk EnterpriseEPSS 0.3%CVE-2024-36989MEDIUMLow-privileged user could create notifications in Splunk Web Bulletin MessagesEPSS 0.3%CVE-2026-76305MEDIUMImproper Access Control during App Downloads in Splunk SOAREPSS 0.3%CVE-2026-76370MEDIUMInformation Disclosure through the REST API in Splunk SOAREPSS 0.3%CVE-2026-76360MEDIUMInformation Disclosure through Missing Authorization in the Health REST API in Splunk SOAREPSS 0.3%CVE-2026-76294MEDIUMImproper Access Control in Field Extraction Management in Splunk EnterpriseEPSS 0.3%CVE-2026-76283HIGHProtection Mechanism Failure in Splunk EnterpriseEPSS 0.3%CVE-2026-20164MEDIUMSensitive Information Disclosure through Improper Access Control in Splunk EnterpriseEPSS 0.3%CVE-2026-20137LOWRisky Commands Safeguards Bypass through preloaded Data Models due to Path Traversal vulnerability in Splunk EnterpriseEPSS 0.3%CVE-2026-76275MEDIUMImproper Authorization in Search Job Listings through the REST API in Splunk EnterpriseEPSS 0.3%CVE-2025-22621MEDIUMPrivilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAREPSS 0.3%