Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Secure Gateway 3.7.23, 3.8.38 Clear all filters
TI-2025-14530 CVE-2025-20230 · GHSA-pr9m-r5mr-v22j

Improper access control in Splunk Enterprise

Priority LOW 29

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00325 Published 2025-03-26 Fixed in 9.4.1, 9.3.3 +4 CWE-284
TI-2025-14531 CVE-2025-20231 · GHSA-5q93-m8w2-xmp8

Sensitive Information Disclosure in Splunk Secure Gateway App

Priority LOW 34

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or…

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.0053 Published 2025-03-26 Fixed in 9.4.1, 9.3.3 +4 CWE-532