Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Cloud Platform 9.2.2406.123, 9.3.2408.118, 9.3.2411.108 Clear all filters
TI-2025-14663 CVE-2025-20368 · GHSA-wr8v-qcgq-v7m3

Cross-site scripting in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00367 Published 2025-10-01 Fixed in 10.0.0, 9.4.4 +5 CWE-79
TI-2025-14664 CVE-2025-20369 · GHSA-7xvq-vm2p-4r2f

Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise

Priority LOW 29

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk rol…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00311 Published 2025-10-01 Fixed in 10.0.0, 9.4.4 +5 CWE-776