CNNVD-202507-749 Information

CNNVD ID

CNNVD-202507-749

CVE-2025-20300

  • CNNVD Published: 2025-07-07

Description (Chinese)

Splunk Cloud Platform和Splunk Enterprise都是美国Splunk公司的产品。Splunk Cloud Platform是一个强大的数据收集、处理和分析服务。Splunk Enterprise是一套数据收集分析软件。 Splunk Enterprise和Splunk Cloud Platform存在安全漏洞,该漏洞源于低权限用户可抑制特定警报。以下产品及版本受到影响:Splunk Enterprise 9.4.2、9.3.5、9.2.6和9.1.9之前版本和Splunk Cloud Platform 9.3.2411.103、9.3.2408.112和9.2.2406.119之前版本。

Description (English)

Splunk Cloud Platform and Splunk Enterprise are products of the United States company Splunk. Splung Cloud Platform is a powerful data collection, processing and analysis service. Splung Enterprise is a data collection and analysis software. There is a security loophole between Splunk Enterprise and Splunk Cloud Platform, which stems from the fact that low-authorized users can suppress specific alarms. The following products and versions were affected: Splung Enterprise 9.4.2, 9.3.5, 9.2.6 and 9.1.9, and Splung Cloud Platform 9.3.2411.103, 9.3.2408.112 and 9.2.2406.119.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

视博网讯

Published

2025-07-07

Last Modified

2026-02-24

References

https://advisory.splunk.com/advisories/SVD-2025-0708

Patch

https://advisory.splunk.com/advisories/SVD-2025-0708

Share on: