CyberCVE

CVE-2025-20371

Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise

Severity
High 7.5
CVSS 3.1
Remote, needs privileges or user interaction what this means
Exploited
Not listed
EPSS
0.005
38.4th percentile
Discovered by
Not disclosed
Published
Oct 1, 2025
Assigned by cisco

Description

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery (SSRF) potentially letting an attacker perform REST API calls on behalf of an authenticated high-privileged user.

Weakness: CWE-918

Affected products

Vendor Product Category Matched by
Cisco Splunk Cloud Platform SIEM & Log Management cna-assigner
Cisco Splunk Enterprise SIEM & Log Management cna-assigner
Vendor-reported products (2)
  • Splunk · Splunk Enterprise
  • Splunk · Splunk Cloud Platform

Credit

Alex Hordijk (hordalex)

References

Something wrong here?