Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Cloud Platform, Splunk Secure Gateway 10.0.2503.8, 10.1.2507.6 and 4 more versions Clear all filters
TI-2025-14682 CVE-2025-20389 · GHSA-49x5-pp3j-h44f

Improper Input Validation in "label" column field in Splunk Secure Gateway App

Priority LOW 29

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the "…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00445 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +8 CWE-20
TI-2025-14676 CVE-2025-20383 · GHSA-qw76-cw53-c7qx

Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app

Priority LOW 20

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "p…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00325 Published 2025-12-03 Fixed in 10.0.2, 9.4.6 +8 CWE-200