CVEvulnerability

CVE-2025-20371

8.8 HIGH Published 2025-10-01 Modified 2026-10-18 Official page ↗
Status
Analyzed
Published
2025-10-01
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-918

Description

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery (SSRF) potentially letting an attacker perform REST API calls on behalf of an authenticated high-privileged user.

Affected configurations

• splunk splunk (>= 9.2.0 < 9.2.8) • splunk splunk (>= 9.3.0 < 9.3.6) • splunk splunk (>= 9.4.0 < 9.4.4) • splunk splunk 10.0.0 • splunk splunk cloud platform (>= 9.2.2406 < 9.2.2406.122) • splunk splunk cloud platform (>= 9.3.2408 < 9.3.2408.119) • splunk splunk cloud platform (>= 9.3.2411 < 9.3.2411.109)

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References