Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2024-29946HIGHRisky command safeguards bypass in Dashboard Examples HubEPSS 0.8%CVE-2022-43561MEDIUMPersistent Cross-Site Scripting in “Save Table” Dialog in Splunk EnterpriseEPSS 0.8%CVE-2023-32708HIGHHTTP Response Splitting via the ‘rest’ SPL CommandEPSS 0.7%CVE-2026-76404CRITICALRemote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server appEPSS 0.7%CVE-2022-27183HIGHReflected XSS in a query parameter of the Monitoring ConsoleEPSS 0.7%CVE-2024-36990MEDIUMDenial of Service (DoS) on the datamodel/web REST endpointEPSS 0.7%CVE-2026-76315HIGHCode Injection through Splunk Web Manager Configuration in Splunk EnterpriseEPSS 0.7%CVE-2026-76395HIGHRemote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI ToolkitEPSS 0.7%CVE-2022-26070MEDIUMError message discloses internal pathEPSS 0.6%CVE-2026-76319HIGHRemote Code Execution (RCE) through Federated Search in Splunk EnterpriseEPSS 0.6%CVE-2026-76313HIGHRemote Code Execution (RCE) through the REST API in Splunk EnterpriseEPSS 0.6%CVE-2026-20266CRITICALOS Command Injection in the btool Configuration Helper in Splunk AI ToolkitEPSS 0.6%CVE-2023-32716MEDIUMDenial of Service via the 'dump' SPL commandEPSS 0.6%CVE-2026-76356HIGHAuthentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAREPSS 0.6%CVE-2023-22935HIGHSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk EnterpriseEPSS 0.6%CVE-2023-32706HIGHDenial Of Service due to Untrusted XML Tag in XML Parser within SAML AuthenticationEPSS 0.6%CVE-2021-3422HIGHIndexer denial-of-service via malformed S2S requestEPSS 0.6%CVE-2023-22939HIGHSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk EnterpriseEPSS 0.6%CVE-2023-40593MEDIUMDenial of Service (DoS) in Splunk Enterprise Using a Malformed SAML RequestEPSS 0.6%CVE-2026-20297HIGHPath Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk EnterpriseEPSS 0.6%