Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2024-22164MEDIUMDenial of Service of an Investigation in Splunk Enterprise Security through Investigation attachmentsEPSS 0.5%CVE-2025-20366MEDIUMImproper Access Control in Background Job Submission in Splunk EnterpriseEPSS 0.4%CVE-2026-76312CRITICALImproper Access Control through Embedded Reports in Splunk EnterpriseEPSS 0.4%CVE-2026-76310CRITICALImproper Access Control through Embedded Report REST API Requests in Splunk EnterpriseEPSS 0.4%CVE-2026-76311CRITICALImproper Access Control in Embedded Report Dispatch Archives in Splunk EnterpriseEPSS 0.4%CVE-2025-20389MEDIUMImproper Input Validation in "label" column field in Splunk Secure Gateway AppEPSS 0.4%CVE-2026-76354HIGHPath Traversal through Search Head Clustering in Splunk EnterpriseEPSS 0.4%CVE-2026-76321HIGHSPL Injection through Nearby Event Searches in Splunk EnterpriseEPSS 0.4%CVE-2023-32710MEDIUMInformation Disclosure via the ‘copyresults’ SPL CommandEPSS 0.4%CVE-2026-76357HIGHRemote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAREPSS 0.4%CVE-2026-76372MEDIUMIncorrect Permission Assignment through Safe Mode in Nmap Scanner for Splunk SOAREPSS 0.4%CVE-2026-76527CRITICALImproper Check or Handling of Exceptional Conditions in Splunk SOAREPSS 0.4%CVE-2026-76284CRITICALImproper Neutralization in Splunk EnterpriseEPSS 0.4%CVE-2023-22940MEDIUMSPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk EnterpriseEPSS 0.4%CVE-2026-76407CRITICALImproper Access Control in Splunk SOAREPSS 0.4%CVE-2025-20227MEDIUMInformation Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard StudioEPSS 0.4%CVE-2026-76253HIGHPrivilege Escalation through Scheduled Search Alert Action Configuration in Splunk EnterpriseEPSS 0.4%CVE-2026-76254HIGHSPL Command Safeguards Bypass through Splunk Web in Splunk EnterpriseEPSS 0.4%CVE-2026-76352HIGHImproper Authorization through the REST API in Splunk EnterpriseEPSS 0.4%CVE-2026-76389HIGHServer-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security CloudEPSS 0.4%