Sensitive Data Exposure in Splunk Enterprise and Cloud Platform
CVE-2025-20366
6.5MEDIUM
Key Information:
- Vendor
Splunk
- Vendor
- CVE Published:
- 1 October 2025
What is CVE-2025-20366?
A vulnerability in Splunk Enterprise and Splunk Cloud Platform allows low-privileged users to access sensitive search results if an administrative search job is processed in the background. By guessing the unique Search ID (SID) of the job, unauthorized users may retrieve confidential information, compromising the integrity and confidentiality of sensitive data. This issue affects specific versions of the products, highlighting the importance of updating to the latest versions to safeguard against potential data leaks.
Affected Version(s)
Splunk Cloud Platform 9.3.2411 < 9.3.2411.111
Splunk Cloud Platform 9.3.2408 < 9.3.2408.119
Splunk Cloud Platform 9.2.2406 < 9.2.2406.122