CVE-2025-20369

MEDIUM

4.6

Descripcion

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language (XML) external entity (XXE) injection through the dashboard tab label field. The XXE injection has the potential to cause denial of service (DoS) attacks.

Detalles CVE

Puntuacion CVSS v3.14.6

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado10/1/2025

Ultima modificacion10/8/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

splunk:splunksplunk:splunk_cloud_platform

Debilidades (CWE)

CWE-776CWE-611

Referencias

https://advisory.splunk.com/advisories/SVD-2025-1004(psirt@cisco.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.