CVE-2025-20320 Information

Description

In Splunk Enterprise versions below 9.4.3 9.3.5 9.2.7 and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.107 9.3.2408.117 and 9.2.2406.121 a low-privileged user that does not hold the dmin\ or \power\ Splunk roles could craft a malicious payload through the User Interface - Views configuration page that could potentially lead to a denial of service (DoS).The user could cause the DoS by exploiting a path traversal vulnerability that allows for deletion of arbitrary files within a Splunk directory. The vulnerability requires the low-privileged user to phish the administrator-level victim by tricking them into initiating a request within their browser. The low-privileged user should not be able to exploit the vulnerability at will.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

Reference

https://advisory.splunk.com/advisories/SVD-2025-0703

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

LOW

Base Score

HIGH

Base Severity

6.3

Related CNNVD

CNNVD-202507-752 (Published: 2025-07-07)