CVE-2025-20371
Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise
Severity
High 7.5
CVSS 3.1
Exploited
Not listed
EPSS
0.004
36.0th percentile
Discovered by
Not disclosed
Published
Oct 1, 2025
Assigned by cisco
Description
In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery (SSRF) potentially letting an attacker perform REST API calls on behalf of an authenticated high-privileged user.
Weakness: CWE-918
Affected products
| Vendor | Product | Category | Matched by |
|---|
No product mapping yet — this CVE is pending taxonomy review.
Vendor-reported affected versions (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud Platform
Credit
Alex Hordijk (hordalex)