Katalog CVE (hal. 624)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.331 (Critical 36.436 · High 105.591 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 31.151–31.200 dari 264.331 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-76383 In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive tok...	4.3 Medium	—	0,21%	19 Agt 2026
CVE-2026-76382 In versions below 3.8.5 of the Phantom app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive archive password by invoking t...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76381 In versions below 1.5.2 of the MS Graph for Active Directory app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76380 In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive document passwor...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76379 In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoki...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76378 In versions below 2.4.5 of the Cisco Secure Malware Analytics app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive sample...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76377 In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking th...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76376 In versions below 2.1.9 of the AWS IAM app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive AWS credentials by invoking an a...	4.3 Medium	—	0,19%	19 Agt 2026
CVE-2026-76375 In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an actio...	5.0 Medium	—	0,30%	19 Agt 2026
CVE-2026-76374 In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to...	4.3 Medium	—	0,30%	19 Agt 2026
CVE-2026-76373 In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could inject crafted input into an Active Directory que...	5.4 Medium	—	0,25%	19 Agt 2026
CVE-2026-76372 In Nmap Scanner versions below 3.0.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the scan network action in a Safe Mode pla...	6.6 Medium	—	0,43%	19 Agt 2026
CVE-2026-76371 In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook...	2.7 Low	—	0,28%	19 Agt 2026
CVE-2026-76370 splunk soar In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State Transfer (REST) API to view the names and id...	4.3 Medium	—	0,27%	19 Agt 2026
CVE-2026-76369 splunk soar In Splunk SOAR versions below 8.6.0, a user who holds the OnPrem Broker role could write files outside the intended Automation Broker log directory. The vulnerability is...	2.7 Low	—	0,35%	19 Agt 2026
CVE-2026-76368 splunk soar In Splunk SOAR versions below 8.6.0, a user who holds a role that contains the playbooks:view permission could view metadata about a playbook repository that they are not...	2.7 Low	—	0,30%	19 Agt 2026
CVE-2026-76367 splunk soar In Splunk SOAR versions below 8.6.0, a user who holds the "Incident Commander" Splunk SOAR role could store JavaScript in a note and run it in the browser of another user...	4.0 Medium	—	0,20%	19 Agt 2026
CVE-2026-76366 splunk soar In Splunk SOAR versions below 8.6.0, a user with a valid Splunk SOAR account could use Representational State Transfer (REST) API filtering on playbook runs to recover se...	6.5 Medium	—	0,39%	19 Agt 2026
CVE-2026-76365 splunk soar In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against th...	6.5 Medium	—	0,40%	19 Agt 2026
CVE-2026-76364 splunk soar In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" Splunk SOAR role could run arbitrary Structured Query Language (SQL) statements against th...	6.5 Medium	—	0,40%	19 Agt 2026
CVE-2026-76363 splunk soar In Splunk SOAR versions below 8.6.0, a user who holds the "Automation Engineer" role could run arbitrary Structured Query Language (SQL) statements against the Splunk SOA...	6.5 Medium	—	0,41%	19 Agt 2026
CVE-2026-76362 splunk soar In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State...	7.4 High	—	0,21%	19 Agt 2026
CVE-2026-76361 splunk soar In Splunk SOAR versions below 8.6.0, a user with the "Administrator" role could use the /rest/support/connectivity/.../check_connectivity endpoint to make Splunk SOAR ini...	2.7 Low	—	0,30%	19 Agt 2026
CVE-2026-76360 splunk soar In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could use the /rest/health endpoint to gather system and cluster telemetry that should be...	4.3 Medium	—	0,27%	19 Agt 2026
CVE-2026-76359 splunk soar In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer's archive extraction to write f...	6.5 Medium	—	0,52%	19 Agt 2026
CVE-2026-76358 splunk soar In Splunk SOAR versions below 8.6.0, a user with app-install privileges could use path traversal during app installation to write files outside the intended temporary dir...	6.5 Medium	—	0,52%	19 Agt 2026
CVE-2026-76357 splunk soar In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer (REST) API and ex...	7.6 High	—	0,44%	19 Agt 2026
CVE-2026-76356 splunk soar In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and exec...	8.1 High	—	0,61%	19 Agt 2026
CVE-2026-76355 splunk In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Repr...	7.5 High	—	0,50%	19 Agt 2026
CVE-2026-76354 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and ava...	8.1 High	—	0,44%	19 Agt 2026
CVE-2026-76353 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could submit a crafted knowledge bund...	5.4 Medium	—	0,37%	19 Agt 2026
CVE-2026-76352 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could create or modify a scripted loo...	8.8 High	—	0,42%	19 Agt 2026
CVE-2026-76351 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the...	8.8 High	—	0,42%	19 Agt 2026
CVE-2026-76350 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user that holds a role with the schedule_search capability could configure Portable Document For...	8.8 High	—	0,52%	19 Agt 2026
CVE-2026-76349 splunk In Splunk Enterprise versions below 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could trick an authenticated user into running arbitrary Search Processing Languag...	6.4 Medium	—	0,26%	19 Agt 2026
CVE-2026-76348 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds a Splunk role that contains the high-privilege list_search_head_clustering capabi...	3.8 Low	—	0,32%	19 Agt 2026
CVE-2026-76347 splunk, splunk secure gateway In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, and Splunk Secure Gateway versions below 3.10.9, 3.9.23, and 3.8.70, a user who does not hold the...	5.4 Medium	—	0,29%	19 Agt 2026
CVE-2026-76346 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a malicious script in dashboard sparkline for...	5.4 Medium	—	0,23%	19 Agt 2026
CVE-2026-76345 splunk In Splunk Enterprise versions below 10.4.2, a user with a high-privilege Splunk role that can manage search head clustering could use the search head cluster member bundl...	6.0 Medium	—	0,52%	19 Agt 2026
CVE-2026-76344 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could write dispatch metadata to an a...	7.7 High	—	0,41%	19 Agt 2026
CVE-2026-76343 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could execute attacker-chosen Structu...	6.5 Medium	—	0,38%	19 Agt 2026
CVE-2026-76342 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store risky Search Processing Language (SPL) comman...	5.4 Medium	—	0,23%	19 Agt 2026
CVE-2026-76341 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store attacker-controlled Search Processing Languag...	5.4 Medium	—	0,23%	19 Agt 2026
CVE-2026-76340 splunk In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could cause Splunk Enterprise to reload token-signing keys through the Representational State Tra...	5.3 Medium	—	0,37%	19 Agt 2026
CVE-2026-76339 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could inject arbitrary Search Process...	5.4 Medium	—	0,23%	19 Agt 2026
CVE-2026-76338 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to a trusted distributed search private key could forge an...	8.1 High	—	0,47%	19 Agt 2026
CVE-2026-76337 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript files outside the Splunk Web static directory. The v...	5.3 Medium	—	0,41%	19 Agt 2026
CVE-2026-76336 splunk In Splunk Enterprise versions below 10.4.2 and 10.2.6, a user who does not hold the "admin" or "power" Splunk roles could delete all Search Processing Language 2 (SPL2) m...	7.1 High	—	0,34%	19 Agt 2026
CVE-2026-76335 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an authenticated user who does not hold a role with the edit_manager_xml capability could write a...	8.8 High	—	0,53%	19 Agt 2026
CVE-2026-76334 splunk In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who holds the "power" Splunk role could store a Dashboard Studio workflow action containing...	6.4 Medium	—	0,15%	19 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.