Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise 10.0.1, 9.2.9 and 2 more versions Clear all filters
TI-2025-14673 CVE-2025-20379 · GHSA-3p87-8mrf-82ww

Information disclosure in Splunk Enterprise

Priority LOW 17

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, and 9.2.9 and Splunk Cloud Platform versions below 9.3.2411.116, 9.3.2408.124, 10.0.2503.5 and 10.1.2507.1, a low-privileged user that does not hold the “admin“ o…

CVSS 3.1LOW 3.5 Network Low privileges User interaction EPSS 0.00303 Published 2025-11-12 Fixed in 10.0.1, 9.4.5 +6 CWE-200
TI-2025-14672 CVE-2025-20378 · GHSA-r9qj-q2g9-r74r

Open Redirect on Web Login endpoint in Splunk Enterprise

Priority LOW 27

In Splunk Enterprise versions below 10.0.1, 9.4.5, 9.3.7, 9.2.9, and Splunk Cloud Platform versions below 10.0.2503.5, 9.3.2411.111, and 9.3.2408.121, an unauthenticated attacker could craft a malicious URL using the `re…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00252 Published 2025-11-12 Fixed in 10.0.1, 9.4.5 +5 CWE-601