VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Dec 3, 2025· Updated Jun 17, 2026

CVE-2025-20384

CVE-2025-20384

Description

In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute (ANSI) escape codes into Splunk log files due to improper validation at the /en-US/static/ web endpoint. This may allow them to poison, forge, or obfuscate sensitive log data through specially crafted HTTP requests, potentially impacting log integrity and detection capabilities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Splunk/Splunk3 versions
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*+ 2 more
    • cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*range: >=9.2.0,<9.2.10
    • cpe:2.3:a:splunk:splunk:10.0.0:*:*:*:enterprise:*:*:*
    • (no CPE)range: <10.0.1, <9.4.6, <9.3.8, <9.2.10, <10.1.2507.4, <10.0.2503.6, <9.3.2411.117.125
  • Splunk/Splunk Cloud Platform3 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: >=9.3.2411,<9.3.2411.117
    • (no CPE)range: <10.1.2507.4, <10.0.2503.6, <9.3.2411.117.125
    • (no CPE)range: 10.1.2507
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <10.0.1, <9.4.6, <9.3.8, <9.2.10+ 1 more
    • (no CPE)range: <10.0.1, <9.4.6, <9.3.8, <9.2.10
    • (no CPE)range: 10.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.