Vulnerabilities fixed in Splunk Enterprise and Splunk Cloud Platform

🗓️ 27 Mar 2025 09:18:30Reported by NCSCType

Splunk fixed vulnerabilities in Enterprise and Cloud Platform enabling low-privilege users to escalate privileges via phishing, cross site forgery, file uploads, and key value store access.

Reporter	Title	Published	Views	Family All 92
ATTACKERKB	CVE-2025-20231	26 Mar 202522:15	–	attackerkb
ATTACKERKB	CVE-2025-20229	26 Mar 202522:15	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the Splunk Web platform for operational analysis in Splunk Enterprise allows a attacker to perform a CSRF attack.	31 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Splunk Dashboard Studio web interface on the Splunk Web platform for operational analysis in the Splunk Enterprise environment allows a hacker to disclose protected information.	31 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, arises from deficiencies in access control. This vulnerability allows an attacker to gain read, modify, or delete access to data stored in the KV Store (Key Value Store).	31 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Splunk Enterprise platform for operational analysis, related to deficiencies in access control, allows a perpetrator to execute arbitrary code.	31 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Splunk Web platform for operational analysis of Splunk Enterprise’s web interface allows attackers to bypass security restrictions, increase their privileges, and execute arbitrary commands.	26 Apr 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mobile device registration and mobile application deployment mechanism of Splunk Secure Gateway, a platform for operational analytics in Splunk Enterprise, arises from insufficient protection of registration data. This vulnerability allows attackers to gain unauthorized access to protected information.	16 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-20226	26 Mar 202522:25	–	circl
Circl	CVE-2025-20227	26 Mar 202522:25	–	circl

Vulners

Node

splunk splunk_cloud_platformRange9.3.2408–9.3.2408.107

splunk splunk_cloud_platformRange9.2.2406–9.2.2406.113

splunk splunk_cloud_platformRange9.1.2312–9.1.2312.208

splunk splunk_secure_gatewayRange3.8–3.8.38

splunk splunk_secure_gatewayRange3.7–3.7.23

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2025-0301
advisory	www.advisory.splunk.com/advisories/SVD-2025-0302
advisory	www.advisory.splunk.com/advisories/SVD-2025-0303
advisory	www.advisory.splunk.com/advisories/SVD-2025-0304
advisory	www.advisory.splunk.com/advisories/SVD-2025-0305
advisory	www.advisory.splunk.com/advisories/SVD-2025-0306
advisory	www.advisory.splunk.com/advisories/SVD-2025-0307
advisory	www.advisory.splunk.com/advisories/SVD-2025-0310

27 Mar 2025 09:18Current

6.8Medium risk

Vulners AI Score6.8

CVSS 48.7

CVSS 3.16.5 - 8

EPSS0.11246

SSVC