Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise 10.0.1, 9.2.8 and 2 more versions Clear all filters
TI-2025-14666 CVE-2025-20371 · GHSA-r5vx-xxjw-m795

Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise

Priority MEDIUM 40

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side requ…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00469 Published 2025-10-01 Fixed in 10.0.1, 9.4.4 +5 CWE-918
TI-2025-14665 CVE-2025-20370 · GHSA-jf74-vfwj-v8h7

Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise

Priority LOW 23

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role that contains the high-privilege capabili…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00558 Published 2025-10-01 Fixed in 10.0.1, 9.4.4 +5 CWE-400