Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise Cloud 9.2.2406.119, 9.3.2408.113, 9.3.2411.104 Clear all filters
TI-2025-14617 CVE-2025-20322 · GHSA-934h-hvxg-j69v

Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise

Priority LOW 19

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, an unauthenticated attacker could send a specially-crafted SPL s…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0022 Published 2025-07-07 Fixed in 9.4.3, 9.3.5 +5 CWE-352
TI-2025-14619 CVE-2025-20324 · GHSA-gw68-m2h3-q75j

Improper Access Control in System Source Types Configuration in Splunk Enterprise

Priority LOW 24

In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" S…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00278 Published 2025-07-07 Fixed in 9.4.2, 9.3.5 +5 CWE-284