Alert Suppression Vulnerability in Splunk Enterprise and Cloud Platform

CVE-2025-20300

What is CVE-2025-20300?

A vulnerability exists in certain versions of Splunk Enterprise and Splunk Cloud Platform where low-privileged users, lacking admin or power roles, can suppress alerts they have only read-only access to. This could potentially hinder the visibility of critical alerts, affecting overall security monitoring and incident response. For detailed mitigation and configuration options, refer to Splunk's official advisory.

References