Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76339MEDIUMSPL Injection through the geostats Command in Splunk EnterpriseEPSS 0.2%CVE-2026-76346MEDIUMStored Cross-Site Scripting (XSS) through Splunk Web Dashboard Sparkline Format Options in Splunk EnterpriseEPSS 0.2%CVE-2026-76392MEDIUMUse of Hard-coded Credentials in Container Connections in Splunk AI ToolkitEPSS 0.2%CVE-2026-76341MEDIUMRisky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk EnterpriseEPSS 0.2%CVE-2026-76342MEDIUMRisky Commands Safeguards Bypass through Splunk Web in Splunk EnterpriseEPSS 0.2%CVE-2024-45737MEDIUMMaintenance mode state change of App Key Value Store (KVStore) through Cross-Site Request Forgery (CSRF)EPSS 0.2%CVE-2021-42743HIGHLocal privilege escalation via a default path in Splunk Enterprise WindowsEPSS 0.2%CVE-2026-76280MEDIUMIncorrect Permission Assignment for App Key Value Store Collections in Splunk Secure GatewayEPSS 0.2%CVE-2026-76267MEDIUMLog Injection through the REST API in Splunk App for Splunk O11y CloudEPSS 0.2%CVE-2026-76279MEDIUMImproper Input Validation of Index Names through the collect Command in Splunk EnterpriseEPSS 0.2%CVE-2026-76273MEDIUMImproper Input Validation through the collect Command in Splunk EnterpriseEPSS 0.2%CVE-2026-76264MEDIUMImproper Authorization through the REST API in Splunk EnterpriseEPSS 0.2%CVE-2026-76306HIGHInformation Disclosure through REST API Query Filters in Splunk SOAREPSS 0.2%CVE-2024-23678HIGHDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk PartitionEPSS 0.2%CVE-2025-20322MEDIUMDenial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk EnterpriseEPSS 0.2%CVE-2026-20141MEDIUMImproper Access Control in Splunk Monitoring Console AppEPSS 0.2%CVE-2026-20265MEDIUMInsecure Default Domain Allowlist in Splunk AI ToolkitEPSS 0.2%CVE-2026-76272MEDIUMMissing Access Control through the REST API in Splunk Secure GatewayEPSS 0.2%CVE-2026-76362HIGHImproper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAREPSS 0.2%CVE-2024-36995MEDIUMLow-privileged user could create experimental itemsEPSS 0.2%