VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Jul 7, 2025· Updated Jun 17, 2026

CVE-2025-20319

CVE-2025-20319

Description

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a user who holds a role that contains the high-privilege capability edit_scripted and list_inputs capability , could perform a remote command execution due to improper user input sanitization on the scripted input files.See Define roles on the Splunk platform with capabilities and Setting up a scripted input for more information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <9.4.3, <9.3.5, <9.2.7, <9.1.10+ 1 more
    • (no CPE)range: <9.4.3, <9.3.5, <9.2.7, <9.1.10
    • (no CPE)range: 9.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.