Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Multiple Splunk Enterprise Vulnerabilities Let Attackers Execute Unauthorized JavaScript code

## Cybersecurity: Splunk Enterprise and Cloud Platform Vulnerability Updates

JBy Jonathan PierceOct 02, 20252 min read

Cybersecurity: Splunk Enterprise and Cloud Platform Vulnerability Updates

Splunk has issued patches for several vulnerabilities in its Enterprise and Cloud Platform products. These vulnerabilities could allow unauthorized JavaScript code execution, access to sensitive data, or cause a denial-of-service (DoS) condition.

The advisories, released on October 1, 2025, describe six security flaws with severity ratings from Medium to High.

Server-Side Request Forgery (SSRF) Vulnerability

The most critical flaw is a Server-Side Request Forgery (SSRF) vulnerability, identified as CVE-2025-20371 , with a CVSS score of 7.5.

This vulnerability allows unauthenticated attackers to trigger a blind SSRF, potentially performing REST API calls on behalf of an authenticated, high-privileged user. Exploitation requires the enableSplunkWebClientNetloc setting to be enabled and may involve phishing.

Code Execution and Information Disclosure Flaws

CVE-2025-20367 (CVSS: 5.7): Allows low-privileged users to execute JavaScript code by crafting a malicious payload via the dataset.command parameter. CVE-2025-20368 (CVSS: 5.7): Similar execution via error messages and job inspection details of a saved search.

CVE-2025-20366 (CVSS: 6.5) facilitates information disclosure, allowing access to administrative search job results by guessing the Search ID (SID).

Splunk has issued patches for several vulnerabilities in its Enterprise and Cloud Platform products.
Jonathan Pierce · Thehackingpost

Denial of Service and XXE Vulnerabilities

CVE-2025-20370 (CVSS: 4.9): Causes high CPU usage and potential DoS through multiple LDAP bind requests. CVE-2025-20369 (CVSS: 4.6): Allows XXE injection through the dashboard tab label field, potentially causing a DoS attack.

The vulnerabilities affect various versions of Splunk Enterprise and Splunk Cloud Platform, including versions below 9.4.4, 9.3.6, and 9.2.8, with some impacting version 10.0.0.

Splunk recommends upgrading to the following or later versions:

CVE ID Vulnerability Type CVSS 3.1 Score Affected Product Affected Versions Fixed Versions

Advertisement

CVE-2025-20366 Information Disclosure 6.5 (Medium) Splunk Enterprise 9.4.0 – 9.4.3, 9.3.0 – 9.3.5, 9.2.0 – 9.2.7 9.4.4, 9.3.6, 9.2.8

Splunk Cloud Platform Below 9.3.2411.111, Below 9.3.2408.119, Below 9.2.2406.122 9.3.2411.111, 9.3.2408.119, 9.2.2406.122

Splunk is actively patching all Splunk Cloud Platform instances and will notify customers upon completion.

For users unable to immediately update, workarounds include disabling Splunk Web if not necessary. To mitigate the SSRF flaw (CVE-2025-20371), set enableSplunkWebClientNetloc to false in the web.conf file.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026