Vulnerabilidades em Splunk

283 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76370MEDIUMInformation Disclosure through the REST API in Splunk SOAREPSS 0.2%CVE-2026-76320MEDIUMSPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk EnterpriseEPSS 0.2%CVE-2026-76371LOWIncorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAREPSS 0.2%CVE-2023-22942MEDIUMCross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk EnterpriseEPSS 0.2%CVE-2026-20162MEDIUMStored Cross-Site Scripting (XSS) through Path Traversal in Splunk EnterpriseEPSS 0.2%CVE-2022-37439MEDIUMMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring inputEPSS 0.2%CVE-2026-20260MEDIUMLog Injection through HTTP Request Paths in Splunk SOAREPSS 0.2%CVE-2025-20322MEDIUMDenial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk EnterpriseEPSS 0.2%CVE-2026-76329MEDIUMSPL Injection through Monitoring Console Dashboard Inputs in Splunk EnterpriseEPSS 0.2%CVE-2026-20141MEDIUMImproper Access Control in Splunk Monitoring Console AppEPSS 0.2%CVE-2026-76318MEDIUMStored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseEPSS 0.2%CVE-2026-76403HIGHImproper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for KafkaEPSS 0.2%CVE-2026-20259MEDIUMImproper Access Control in Splunk EnterpriseEPSS 0.2%CVE-2026-76346MEDIUMStored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk EnterpriseEPSS 0.2%CVE-2026-76398MEDIUMImproper Access Control during Experiment History Deletion through the REST API in Splunk AI ToolkitEPSS 0.2%CVE-2026-76252MEDIUMCross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk EnterpriseEPSS 0.2%CVE-2026-76373MEDIUMFilter Injection through Action Parameters in AD LDAP app for Splunk SOAREPSS 0.2%CVE-2026-20296HIGHSPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk EnterpriseEPSS 0.2%CVE-2026-76339MEDIUMSPL Injection through the geostats Command in Splunk EnterpriseEPSS 0.2%CVE-2026-76362HIGHImproper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAREPSS 0.2%