Vulnerabilidades em Splunk

337 resultados
Análise Vexday

O portfólio de vulnerabilidades do Splunk soma 170 CVEs catalogadas, com uma taxa de exploração ativa que supera a média geral do catálogo em 1,3×, sinal de que as falhas nessa plataforma atraem atenção real de agentes maliciosos. O CVE-2026-20253, único item confirmado no CISA KEV, apresenta EPSS de 0,8817 — indicando altíssima probabilidade de exploração —, e deve ser tratado como prioridade imediata de correção. O tipo de falha mais recorrente, CWE-79 (cross-site scripting), sugere que superfícies de interface com o usuário seguem sendo o vetor mais frequente no produto. A chegada de 19 novas CVEs nos últimos 90 dias, somada à existência de 3 vulnerabilidades com PoC pública, reforça a necessidade de ciclos curtos de patching e monitoramento contínuo do ambiente.

CVE-2024-45740MEDIUMPersistent Cross-Site Scripting (XSS) through Scheduled Views on Splunk EnterpriseEPSS 0.4%CVE-2025-20368MEDIUMStored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk EnterpriseEPSS 0.4%CVE-2025-20367MEDIUMReflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk EnterpriseEPSS 0.4%CVE-2026-76353MEDIUMPath Traversal through Knowledge Bundle Replication in Splunk EnterpriseEPSS 0.4%CVE-2026-76285CRITICALImproper Adherence to Coding Standards in Splunk EnterpriseEPSS 0.4%CVE-2024-53245LOWInformation Disclosure due to Username Collision with a Role that has the same Name as the UserEPSS 0.4%CVE-2023-22931MEDIUM‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk EnterpriseEPSS 0.4%CVE-2026-76528CRITICALProtection Mechanism Failure in Splunk SOAREPSS 0.4%CVE-2023-32717MEDIUMRole-based Access Control (RBAC) Bypass on '/services/indexing/preview' REST Endpoint Can Overwrite Search ResultsEPSS 0.4%CVE-2026-76325HIGHStored Cross-Site Scripting (XSS) through Splunk Web in Splunk EnterpriseEPSS 0.4%CVE-2026-20256MEDIUMImproper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk EnterpriseEPSS 0.4%CVE-2023-22938MEDIUMPermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk EnterpriseEPSS 0.4%CVE-2026-76526HIGHImproper Neutralization in Splunk SOAREPSS 0.4%CVE-2026-76369LOWPath Traversal through Automation Broker in Splunk SOAREPSS 0.4%CVE-2024-36996MEDIUMInformation Disclosure of user namesEPSS 0.4%CVE-2026-76298HIGHUse of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk EnterpriseEPSS 0.4%CVE-2026-76271MEDIUMDenial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk EnterpriseEPSS 0.4%CVE-2026-76300HIGHSecurity Hardening in Splunk Enterprise - October 2026EPSS 0.4%CVE-2026-20255MEDIUMImproper Input Validation through Classic Dashboards in Splunk EnterpriseEPSS 0.4%CVE-2026-76394HIGHMissing Authorization in Container and Connection Management through the REST API in Splunk AI ToolkitEPSS 0.4%