#advisory

共收录 23530 条相关情报。

← 返回所有主题
安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could...

CVE-2026-76370

In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks...

CVE-2026-76371

In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could r

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run...

CVE-2026-76372

In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR co

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files...

CVE-2026-76369

In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Auto

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with...

CVE-2026-76373

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network...

CVE-2026-76362

In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOA

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the...

CVE-2026-76355

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edg

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role...

CVE-2026-76365

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run...

CVE-2026-76363

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Quer

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role...

CVE-2026-76367

In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript i

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role...

CVE-2026-76364

In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Str

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use...

CVE-2026-76366

In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold...

CVE-2026-76354

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power"

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the ...

CVE-2026-76360

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in...

CVE-2026-76356

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to a

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a...

CVE-2026-76357

In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest...

CVE-2026-76361

In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../c

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path...

CVE-2026-76359

In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal F

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal...

CVE-2026-76358

In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-20 发布INFO

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway...

CVE-2026-76351

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9,

历史摘要 · 未重新核验 · GitHub Advisory