CVE-2025-20367
- EPSS 0.03%
- Veröffentlicht 01.10.2025 17:15:39
- Zuletzt bearbeitet 08.10.2025 20:22:49
In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could craft a malicious pay...
CVE-2025-20366
- EPSS 0.04%
- Veröffentlicht 01.10.2025 17:15:39
- Zuletzt bearbeitet 08.10.2025 20:36:04
In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that does not hold the admin or power Splunk roles could access sensitive search...
CVE-2025-20322
- EPSS 0.06%
- Veröffentlicht 07.07.2025 17:48:05
- Zuletzt bearbeitet 21.07.2025 20:54:57
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, an unauthenticated attacker could send a specially-crafted SPL search command that could trigg...
CVE-2025-20321
- EPSS 0.03%
- Veröffentlicht 07.07.2025 17:48:03
- Zuletzt bearbeitet 21.07.2025 20:57:33
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.114, and 9.2.2406.119, an unauthenticated attacker can send a specially-crafted SPL search that could change the membe...
CVE-2025-20325
- EPSS 0.05%
- Veröffentlicht 07.07.2025 17:48:02
- Zuletzt bearbeitet 01.08.2025 18:36:57
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.113, and 9.2.2406.119, the software potentially exposes the search head cluster [splunk.secret](https://help.splunk.c...
CVE-2025-20324
- EPSS 0.05%
- Veröffentlicht 07.07.2025 17:48:00
- Zuletzt bearbeitet 21.07.2025 20:43:59
In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create or ov...
CVE-2025-20320
- EPSS 0.12%
- Veröffentlicht 07.07.2025 17:47:59
- Zuletzt bearbeitet 21.07.2025 20:58:05
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a mali...
CVE-2025-20300
- EPSS 0.06%
- Veröffentlicht 07.07.2025 17:47:58
- Zuletzt bearbeitet 21.07.2025 20:58:42
In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles, and has read-only ...
CVE-2025-20297
- EPSS 0.12%
- Veröffentlicht 02.06.2025 17:14:02
- Zuletzt bearbeitet 01.08.2025 15:44:58
In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious pay...
CVE-2025-20232
- EPSS 0.07%
- Veröffentlicht 26.03.2025 22:06:00
- Zuletzt bearbeitet 21.07.2025 20:45:39
In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.103, 9.2.2406.108, 9.2.2403.113, 9.1.2312.208 and 9.1.2308.212, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles...