Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2025-14663 CVE-2025-20368 · GHSA-wr8v-qcgq-v7m3

Cross-site scripting in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00367 Published 2025-10-01 Fixed in 10.0.0, 9.4.4 +5 CWE-79
TI-2025-14662 CVE-2025-20367 · GHSA-mr5p-hhp7-5qgx

Cross-site scripting in Splunk Enterprise

Priority LOW 26

In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a low-privileged user that does not hold the 'admin' or 'power' Splunk rol…

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00367 Published 2025-10-01 Fixed in 10.0.0, 9.4.4 +5 CWE-79
Priority LOW 29

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that does not hold the admin or power Splunk roles…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00449 Published 2025-10-01 Fixed in 10.0.0, 9.4.4 +5 CWE-284
Priority LOW 29

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk rol…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00311 Published 2025-10-01 Fixed in 10.0.0, 9.4.4 +5 CWE-776