CVE-2025-20371
Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise
Severity
High 7.5
CVSS 3.1
Exploited
Not listed
EPSS
0.005
39.8th percentile
Discovered by
Not disclosed
Published
Oct 1, 2025
Assigned by cisco
Description
In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery (SSRF) potentially letting an attacker perform REST API calls on behalf of an authenticated high-privileged user.
Weakness: CWE-918
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | cna-assigner |
| Cisco | Splunk Enterprise | SIEM & Log Management | cna-assigner |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud Platform
Credit
Alex Hordijk (hordalex)