Vulnerabilities

TI-2025-14530 CVE-2025-20230 · GHSA-pr9m-r5mr-v22j

Improper access control in Splunk Enterprise

LOW 29

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00325 Published 2025-03-26 Fixed in 9.4.1, 9.3.3 +4 CWE-284

TI-2025-14527 CVE-2025-20227 · GHSA-66v8-2jrc-g3f2

Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio

LOW 20

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and 9.1.2308.214, a low-privileged user that does not ho…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00428 Published 2025-03-26 Fixed in 9.4.1, 9.3.3 +7 CWE-20

TI-2025-14526 CVE-2025-20226 · GHSA-c8hx-mpvv-3952

Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise

LOW 26

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.111, and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Sp…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00482 Published 2025-03-26 Fixed in 9.4.1, 9.3.3 +5 CWE-200

TI-2025-14531 CVE-2025-20231 · GHSA-5q93-m8w2-xmp8

Sensitive Information Disclosure in Splunk Secure Gateway App

LOW 34