Splunk Splunk Enterprise Cloud
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-20370 | 9.3.2411 – < 9.3.2411.108 ; 9.3.2408 – < 9.3.2408.118 ; 9.2.2406 – < 9.2.2406.123 | Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise | MEDIUM 4.9 | 0.6 % | ||
| CVE-2025-20322 | 9.3.2411 – < 9.3.2411.104 ; 9.3.2408 – < 9.3.2408.113 ; 9.2.2406 – < 9.2.2406.119 | Denial of Service (DoS) in Search Head Cluster through Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 4.3 | 0.2 % | ||
| CVE-2025-20321 | 9.3.2411 – < 9.3.2411.104 ; 9.3.2408 – < 9.3.2408.114 ; 9.2.2406 – < 9.2.2406.119 | Membership State Change in Splunk Search Head Cluster through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-20324 | 9.3.2411 – < 9.3.2411.104 ; 9.3.2408 – < 9.3.2408.113 ; 9.2.2406 – < 9.2.2406.119 | Improper Access Control in System Source Types Configuration in Splunk Enterprise | MEDIUM 5.4 | 0.3 % | ||
| CVE-2025-20320 | 9.3.2411 – < 9.3.2411.107 ; 9.3.2408 – < 9.3.2408.117 ; 9.2.2406 – < 9.2.2406.121 | Denial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise | HIGH 7.3 | 0.5 % |