The vulnerability of the Splunk Enterprise operating analysis platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

🗓️ 24 Dec 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Splunk Enterprise analysis platform vulnerable to cross site scripting due to unprotected website structure, enabling remote attacks.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-20385	4 Dec 202514:50	–	circl
CNNVD	Splunk Cloud Platform和Splunk Enterprise 跨站脚本漏洞	3 Dec 202500:00	–	cnnvd
CVE	CVE-2025-20385	3 Dec 202517:00	–	cve
Cvelist	CVE-2025-20385 Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise	3 Dec 202517:00	–	cvelist
EUVD	EUVD-2025-201002	3 Dec 202517:00	–	euvd
NCSC	Vulnerabilities fixed in Splunk Enterprise and Splunk Cloud Platform	8 Dec 202508:23	–	ncsc
NVD	CVE-2025-20385	3 Dec 202517:15	–	nvd
OSV	CVE-2025-20385	3 Dec 202517:15	–	osv
Positive Technologies	PT-2025-48957	3 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20385	4 Dec 202517:16	–	redhatcve

Vulners

Node

splunk splunk_enterpriseRange<10.0.2

OR

splunk splunk_enterpriseRange9.4.0–9.4.6

OR

splunk splunk_enterpriseRange9.3.0–9.3.8

OR

splunk splunk_enterpriseRange9.2.0–9.2.10

OR

splunk splunk_cloud_platformRange<9.3.2411.117

OR

splunk splunk_cloud_platformRange<10.1.2507.6

OR

splunk splunk_cloud_platformRange<10.0.2503.7

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2025-1204
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2025120404
web	www.web.nvd.nist.gov/view/vuln/detail

24 Dec 2025 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 32.4

CVSS 24

EPSS0.00232

Splunk Enterprise cross site scripting website structure protection remote attacks