Splunk Luki w zabezpieczeniach

Oś czasu

Rodzaj

Log Management Software	98

Produkt

Splunk Enterprise	83
Splunk Cloud Platform	10
Splunk Cloud	5
Splunk Lite	4
Splunk Add-on Builder	3

Przeciwdziałanie

Official Fix	95
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	3

Wykorzystywanie

High	4
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	92

Wektor dostępu

Not Defined	0
Physical	0
Local	11
Adjacent	0
Network	87

Uwierzytelnianie

Not Defined	0
High	12
Low	50
None	36

Interakcja z użytkownikiem

Not Defined	0
Required	38
None	60

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	1
≤4	9
≤5	18
≤6	19
≤7	25
≤8	20
≤9	5
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	9
≤5	18
≤6	24
≤7	24
≤8	16
≤9	6
≤10	0

VulDB

≤1	0
≤2	1
≤3	10
≤4	14
≤5	22
≤6	19
≤7	22
≤8	7
≤9	3
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	5
≤6	7
≤7	13
≤8	8
≤9	10
≤10	4

CNA

≤1	0
≤2	0
≤3	2
≤4	1
≤5	15
≤6	4
≤7	11
≤8	17
≤9	25
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	20
<2k	65
<5k	13
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	98
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (17): Add-on Builder (3), App for Lookup File Editing (2), App for Stream (1), Cloud (5), CloudConnect SDK (1), Cloud Platform (10), Enterprise (83), Enterprise Security (2), Enterprise Server (1), Hadoop Connect App (1), IT Service Intelligence (1), Light (2), Lite (4), SOAR (1), Splunk Enterprise (1), Universal Forwarders (1), Web (1)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2024-03-27	7.2	7.0	Splunk Enterprise Dashboard Studio App privilege escalation	Log Management Software	Not Defined	Official Fix	0.00043	0.00	CVE-2024-29946
2024-03-27	4.9	4.9	Splunk Enterprise JsonWebToken Component information disclosure	Log Management Software	Not Defined	Official Fix	0.00043	0.06	CVE-2024-29945
2024-01-30	5.3	5.2	Splunk Add-on Builder information disclosure	Log Management Software	Not Defined	Official Fix	0.00049	0.07	CVE-2023-46230
2024-01-30	5.6	5.5	Splunk Add-on Builder Session Token information disclosure	Log Management Software	Not Defined	Official Fix	0.00050	0.02	CVE-2023-46231
2024-01-22	4.6	4.6	Splunk Enterprise/Cloud RapidDiag Utility information disclosure	Log Management Software	Not Defined	Official Fix	0.00046	0.03	CVE-2024-23677
2024-01-22	5.9	5.8	Splunk Enterprise/Cloud KV Store privilege escalation	Log Management Software	Not Defined	Official Fix	0.00046	0.02	CVE-2024-23675
2024-01-22	7.7	7.6	Splunk Enterprise privilege escalation	Log Management Software	Not Defined	Official Fix	0.00046	0.03	CVE-2024-23678
2024-01-22	3.9	3.8	Splunk Enterprise/Cloud SPL Command information disclosure	Log Management Software	Not Defined	Official Fix	0.00045	0.02	CVE-2024-23676
2024-01-09	5.4	5.3	Splunk Enterprise Security Investigation denial of service	Log Management Software	Not Defined	Official Fix	0.00044	0.02	CVE-2024-22165
2024-01-09	4.3	4.2	Splunk Enterprise Security Attachment Endpoint denial of service	Log Management Software	Not Defined	Official Fix	0.00044	0.02	CVE-2024-22164

88 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 88 results.

◂ PoprzedniPrzeglądKolejny ▸

Interested in the pricing of exploits?

See the underground prices here!