CVE-2025-20383

Published: Dec 3, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: psirt@cisco.com (Secondary)

Description

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and below 3.9.10, 3.8.58, and 3.7.28 of Splunk Secure Gateway app in Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles and subscribes to mobile push notifications could receive notifications that disclose the title and description of the report or alert even if they do not have access to view the report or alert.

Affected (10)

Products: Splunk: Splunk, Splunk Cloud Platform, Splunk Secure Gateway

Splunk

3 products

Splunk

Splunk Cloud Platform

Splunk Secure Gateway

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	10.0.0 ≤ version < 10.0.2
Splunk Splunk	9.2.0 ≤ version < 9.2.10
Splunk Splunk	9.3.0 ≤ version < 9.3.8
Splunk Splunk	9.4.0 ≤ version < 9.4.6
Splunk Splunk Cloud Platform	10.0.2503 ≤ version < 10.0.2503.8
Splunk Splunk Cloud Platform	10.1.2507 ≤ version < 10.1.2507.6
Splunk Splunk Cloud Platform	9.3.2411 ≤ version < 9.3.2411.120
Splunk Splunk Secure Gateway	3.7.0 ≤ version < 3.7.28
Splunk Splunk Secure Gateway	3.8.0 ≤ version < 3.8.58
Splunk Splunk Secure Gateway	3.9.0 ≤ version < 3.9.10

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://advisory.splunk.com/advisories/SVD-2025-1202

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.