Priority LOW 29
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the "…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2025-12-03 · Fixed in 10.0.2, 9.4.6 +8 CWE-20
Priority LOW 37
In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwar…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2025-12-03 · Fixed in 10.0.2, 9.4.6 +2 CWE-732
Priority LOW 20
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "p…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00325 · Published 2025-12-03 · Fixed in 10.0.2, 9.4.6 +8 CWE-200
Priority LOW 37
In Splunk Enterprise for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Splunk Enterprise for Win…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2025-12-03 · Fixed in 10.0.2, 9.4.6 +2 CWE-732
Priority LOW 22
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.6, 10.0.2503.7, and 9.3.2411.117, a user who holds a role with a high privilege capability `admin_a…
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00296 · Published 2025-12-03 · Fixed in 10.0.2, 9.4.6 +5 CWE-79
Priority LOW 24
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.10, 10.0.2503.8, and 9.3.2411.120, a low-privileged user that does not hold the "admin" or "power"…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00243 · Published 2025-12-03 · Fixed in 10.0.2, 9.4.6 +5 CWE-601