Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76252MEDIUMCross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk EnterpriseEPSS 0.3%CVE-2026-76329MEDIUMSPL Injection through Monitoring Console Dashboard Inputs in Splunk EnterpriseEPSS 0.3%CVE-2026-76327MEDIUMSPL Injection through Splunk Web in Splunk Secure GatewayEPSS 0.3%CVE-2026-76349MEDIUMSPL Injection through Splunk Web Form Tokens in Splunk EnterpriseEPSS 0.3%CVE-2026-76398MEDIUMImproper Access Control during Experiment History Deletion through the REST API in Splunk AI ToolkitEPSS 0.3%CVE-2026-76318MEDIUMStored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseEPSS 0.3%CVE-2023-4571HIGHUnauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)EPSS 0.3%CVE-2025-20378LOWOpen Redirect on Web Login endpoint in Splunk EnterpriseEPSS 0.3%CVE-2026-76373MEDIUMFilter Injection through Action Parameters in AD LDAP app for Splunk SOAREPSS 0.3%CVE-2026-20202MEDIUMImproper Input Validation during User Account Creation in Splunk EnterpriseEPSS 0.2%CVE-2026-76277MEDIUMImproper Input Validation of Native Splunk Usernames through the REST API in Splunk EnterpriseEPSS 0.2%CVE-2026-76403HIGHImproper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for KafkaEPSS 0.2%CVE-2025-20382LOWURL validation bypass through Views Dashboard in Splunk EnterpriseEPSS 0.2%CVE-2025-20373LOWSensitive Information Disclosure in “_internal“ index through Splunk Add-On for Palo Alto NetworksEPSS 0.2%CVE-2026-20162MEDIUMStored Cross-Site Scripting (XSS) through Path Traversal in Splunk EnterpriseEPSS 0.2%CVE-2026-76276MEDIUMInformation Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk EnterpriseEPSS 0.2%CVE-2025-20381MEDIUMSPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP toolEPSS 0.2%CVE-2025-20228MEDIUMMaintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk EnterpriseEPSS 0.2%CVE-2026-20258HIGHStored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk EnterpriseEPSS 0.2%CVE-2023-40597HIGHAbsolute Path Traversal in Splunk Enterprise Using runshellscript.pyEPSS 0.2%