Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76383MEDIUMInformation Disclosure through Action Parameters in RSA SecurID Authentication Manager app for Splunk SOAREPSS 0.2%CVE-2026-76287MEDIUMAuthorization Bypass in the Data Management REST API in Splunk EnterpriseEPSS 0.2%CVE-2026-76278MEDIUMAuthorization Bypass in SPL2 Module Permissions in Splunk EnterpriseEPSS 0.2%CVE-2026-76296MEDIUMMissing Authorization through Sourcetype Renaming in Splunk Web for Splunk EnterpriseEPSS 0.2%CVE-2023-22942MEDIUMCross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk EnterpriseEPSS 0.2%CVE-2022-37439MEDIUMMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring inputEPSS 0.2%CVE-2026-20260MEDIUMLog Injection through HTTP Request Paths in Splunk SOAREPSS 0.2%CVE-2025-20321MEDIUMMembership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk EnterpriseEPSS 0.2%CVE-2026-76367MEDIUMStored Cross-Site Scripting (XSS) through Notes in Splunk SOAREPSS 0.2%CVE-2026-20165MEDIUMSensitive Information Disclosure in MongoClient logging channel in Splunk EnterpriseEPSS 0.2%CVE-2026-20259MEDIUMImproper Access Control in Splunk EnterpriseEPSS 0.2%CVE-2026-76380MEDIUMInformation Disclosure through Action Parameters in CrowdStrike OAuth API app for Splunk SOAREPSS 0.2%CVE-2026-76386MEDIUMInformation Disclosure through Action Parameters in Zoom app for Splunk SOAREPSS 0.2%CVE-2026-76379MEDIUMInformation Disclosure through Action Parameters in Cisco Webex app for Splunk SOAREPSS 0.2%CVE-2026-76405MEDIUMInformation Disclosure through Cleartext Storage in the App Key Value Store in the Splunk On-Call (VictorOps) appEPSS 0.2%CVE-2026-76376MEDIUMInformation Disclosure through Action Parameters in AWS IAM app for Splunk SOAREPSS 0.2%CVE-2026-76384MEDIUMInformation Disclosure through Action Parameters in Splunk Attack Analyzer Connector for Splunk SOAREPSS 0.2%CVE-2026-76378MEDIUMInformation Disclosure through Action Parameters in Cisco Secure Malware Analytics app for Splunk SOAREPSS 0.2%CVE-2026-76382MEDIUMInformation Disclosure through Action Parameters in Phantom app for Splunk SOAREPSS 0.2%CVE-2026-76377MEDIUMInformation Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAREPSS 0.2%