CVE 7.5 HIGH

Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise_CVE-2025-20371

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery (SSRF) potentially letting an attacker perform REST API calls on behalf of an authenticated high-privileged user.

Basic Information

ID CVE-2025-20371
Source cisco
Published Oct 1, 2025 at 16:08

Affected Product

Vendor Splunk
Product Splunk Enterprise
Version 10.0
Affected Versions Splunk Splunk Enterprise 10.0
Splunk Splunk Enterprise 9.4
Splunk Splunk Enterprise 9.3
Splunk Splunk Enterprise 9.2
Splunk Splunk Cloud Platform 9.3.2411
Splunk Splunk Cloud Platform 9.3.2408
Splunk Splunk Cloud Platform 9.2.2406

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.