Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2026-76351HIGHServer-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure GatewayEPSS 0.4%CVE-2026-76402HIGHServer-Side Request Forgery (SSRF) through the REST API in Splunk Connect for KafkaEPSS 0.4%CVE-2023-22937MEDIUMUnnecessary File Extensions Allowed by Lookup Table Uploads in Splunk EnterpriseEPSS 0.4%CVE-2025-20384MEDIUMUnauthenticated Log Injection in Splunk EnterpriseEPSS 0.4%CVE-2026-76344HIGHPath Traversal through the Search Dispatch REST API in Splunk EnterpriseEPSS 0.4%CVE-2026-20254MEDIUMInformation Disclosure through External Content Restriction Bypass in Splunk EnterpriseEPSS 0.4%CVE-2026-76363MEDIUMStructured Query Language Injection through the REST API in Splunk SOAREPSS 0.4%CVE-2026-76531CRITICALFiles or Directories Accessible to External Parties in Splunk SOAREPSS 0.4%CVE-2026-76337MEDIUMPath Traversal through Splunk Web Static File Serving in Splunk EnterpriseEPSS 0.4%CVE-2026-76364MEDIUMStructured Query Language (SQL) Injection through Custom Function Results in Splunk SOAREPSS 0.4%CVE-2026-76365MEDIUMStructured Query Language (SQL) Injection through Custom Lists in Splunk SOAREPSS 0.4%CVE-2026-76387HIGHSPL Injection through the REST API in Splunk Enterprise SecurityEPSS 0.4%CVE-2026-76331HIGHSPL Injection through the REST API in Splunk EnterpriseEPSS 0.4%CVE-2026-76302CRITICALSecurity Hardening in Splunk Enterprise - October 2026EPSS 0.4%CVE-2023-40594MEDIUMDenial of Service (DoS) via the ‘printf’ Search FunctionEPSS 0.4%CVE-2023-22932HIGHPersistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk EnterpriseEPSS 0.4%CVE-2026-76307HIGHSensitive Information Disclosure through REST API Query Filters in Splunk SOAREPSS 0.4%CVE-2026-20240HIGHDenial of Service through coldToFrozen.sh Script in Splunk EnterpriseEPSS 0.4%CVE-2024-23677MEDIUMServer Response Disclosure in RapidDiag Salesforce.com Log FileEPSS 0.4%CVE-2026-76390MEDIUMInformation Disclosure through Splunk Web in Cisco Talos Intelligence for Enterprise Security CloudEPSS 0.4%