Servers and applications
CVE-2025-20383
In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles and subscribes to mobile push notifications could receive notifications that disclose the title and description of the report or alert even if they do not have…
- Severity
- Medium 4.3
- Published
- 3 Dec 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.2.10, 9.3.8, 9.4.6, 10.0.2
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk |
|