UpHeron
All vulnerabilities

Servers and applications

CVE-2025-20384

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files due to improper validation at the /en-US/static/ web endpoint. This may allow them to poison, forge, or obfuscate…

Severity
Medium 5.3
Published
3 Dec 2025
Last changed
25 Sept 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.2.10, 9.3.8, 9.4.6
Sources
NVD

Affected software

SoftwareAffected versions
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk
  • From 9.2.0 before 9.2.10
  • From 9.3.0 before 9.3.8
  • From 9.4.0 before 9.4.6
  • Version 10.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-20384
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-20384