Splunk in March 2025: incidents, uptime and changes

Name: Splunk status incidents and page changes, March 2025
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

0incidents posted

0labelled major or critical

0price changes

0notable page changes

Incidents 0

Splunk posted no incidents in March 2025.

CVE-2025-20231 Sensitive Information Disclosure in Splunk Secure Gateway App (CVSS 7.1)
CVE-2025-20226 Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise (CVSS 5.7)
CVE-2025-20227 Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio (CVSS 4.3)
CVE-2025-20228 Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise (CVSS 6.5)
CVE-2025-20229 Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise (CVSS 8.0)
CVE-2025-20232 Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise (CVSS 5.7)
CVE-2025-20233 Incorrect permissions set by the “chmod“ and “makedirs“ Python functions in Splunk App for Lookup File Editing (CVSS 2.5)
CVE-2025-20230 Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App (CVSS 4.3)

Splunk posted 0 status incidents in March 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.