Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise 9.1.8, 9.2.5, 9.3.3 Clear all filters
TI-2025-14532 CVE-2025-20232 · GHSA-g97h-g237-c9p9

Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.103, 9.2.2406.108, 9.2.2403.113, 9.1.2312.208 and 9.1.2308.212, a low-privileged user that does not hold the “…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00482 Published 2025-03-26 Fixed in 9.3.3, 9.2.5 +6 CWE-200
TI-2025-14528 CVE-2025-20228 · GHSA-4gcx-7vhp-wj94

Cross-site request forgery in Splunk Enterprise

Priority LOW 28

In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.2.2403.108, and 9.1.2312.204, a low-privileged user that does not hold the "admin" or "power" Splunk roles could chan…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00236 Published 2025-03-26 Fixed in 9.3.3, 9.2.5 +3 CWE-352