İçeriğe atla
Noroxi

Splunk kayıtları

Splunk üreticisine ait 407 yayımlanmış kayıt. Bunların 2 tanesi sahada sömürüldü (CISA KEV listesinde), 8 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
2 · %0,5
Silahlaştırılmış
8 · %2
Pre-auth RCE
7
Düzeltme kaydı olan
%14,7
Yayından KEV’e ortanca
1479 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

407 kayıt
  • CVE-2026-20253
    98Hemen

    Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96

    splunk · splunk10 Haz 2026

  • CVE-2014-0160
    90Hemen

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    openssl · openssl7 Nis 2014

  • CVE-2023-46214
    62Bu hafta

    Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

    YüksekCVSS 8,8SilahlaştırılmışEPSS %89

    splunk · cloud16 Kas 2023

  • CVE-2018-11409
    60Bu hafta

    Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demon

    OrtaCVSS 5,3SilahlaştırılmışEPSS %98

    splunk · splunk8 Haz 2018

  • CVE-2023-32707
    59Planlayın

    ‘edit_user’ Capability Privilege Escalation

    YüksekCVSS 8,8SilahlaştırılmışEPSS %78

    splunk · splunk1 Haz 2023

  • CVE-2021-22901
    51Planlayın

    curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session t

    YüksekCVSS 8,1İstismar yokEPSS %63

    haxx · curl11 Haz 2021

  • CVE-2023-32714
    45Planlayın

    Path Traversal in Splunk App for Lookup File Editing

    YüksekCVSS 8,1İstismar yokEPSS %42

    splunk · splunk1 Haz 2023

  • CVE-2026-20251
    44Planlayın

    Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

    YüksekCVSS 8,8Kavram kanıtıEPSS %30

    splunk · splunk10 Haz 2026

  • CVE-2022-32207
    43Planlayın

    When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a ren

    KritikCVSS 9,8İstismar yokEPSS %12

    haxx · curl7 Tem 2022

  • CVE-2021-30560
    41Planlayın

    Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a

    YüksekCVSS 8,8İstismar yokEPSS %20

    google · chrome3 Ağu 2021

  • CVE-2022-43571
    41Planlayın

    Remote Code Execution through dashboard PDF generation component in Splunk Enterprise

    YüksekCVSS 8,8SilahlaştırılmışEPSS %18

    splunk · splunk3 Kas 2022

  • CVE-2026-76268
    41Planlayın

    Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    splunk · splunk7 Eki 2026

  • CVE-2022-32221
    41Planlayın

    When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when th

    KritikCVSS 9,8İstismar yokEPSS %5

    haxx · curl5 Ara 2022

  • CVE-2011-4642
    40Planlayın

    mappy.py in Splunk Web in Splunk 4.2.x before 4.2.5 does not properly restrict use of the mappy command to access Python classes, which allo

    OrtaCVSS 4,6SilahlaştırılmışEPSS %28

    splunk · splunk3 Oca 2012

  • CVE-2024-36985
    40Planlayın

    Remote Code Execution (RCE) through an external lookup due to “copybuckets.py“ script in the “splunk_archiver“ application in Splunk Enterprise

    YüksekCVSS 8,8SilahlaştırılmışEPSS %6

    splunk · splunk1 Tem 2024

  • CVE-2016-10126
    40Planlayın

    Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and

    KritikCVSS 9,8İstismar yokEPSS %3

    splunk · splunk10 Oca 2017

  • CVE-2021-3520
    40Planlayın

    There's a flaw in lz4.

    KritikCVSS 9,8İstismar yokEPSS %3

    lz4 project · lz42 Haz 2021

  • CVE-2017-17067
    40Planlayın

    Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12,

    KritikCVSS 9,8İstismar yokEPSS %2

    splunk · splunk29 Kas 2017

  • CVE-2022-36227
    40Planlayın

    In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if th

    KritikCVSS 9,8İstismar yokEPSS %2

    libarchive · libarchive22 Kas 2022

  • CVE-2022-32158
    40Planlayın

    Splunk Enterprise deployment servers allow client publishing of forwarder bundles

    KritikCVSS 10,0İstismar yokEPSS %1

    splunk · splunk15 Haz 2022

  • CVE-2011-4644
    39İzleyin

    Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentio

    KritikCVSS 9,3Kavram kanıtıEPSS %7

    splunk · splunk3 Oca 2012

  • CVE-2022-37437
    39İzleyin

    Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation

    KritikCVSS 9,8İstismar yokEPSS %0

    splunk · splunk16 Ağu 2022

  • CVE-2026-76284
    39İzleyin

    Improper Neutralization in Splunk Enterprise

    KritikCVSS 9,8İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2026-76285
    39İzleyin

    Improper Adherence to Coding Standards in Splunk Enterprise

    KritikCVSS 9,8İstismar yokEPSS %0

    splunk · splunk7 Eki 2026

  • CVE-2023-32713
    39İzleyin

    Local Privilege Escalation via the ‘streamfwd’ program in Splunk App for Stream

    KritikCVSS 9,9İstismar yokEPSS %0

    splunk · splunk app for stream1 Haz 2023