Splunk in October 2025: incidents, uptime and changes

Name: Splunk status incidents and page changes, October 2025
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

0incidents posted

0labelled major or critical

0price changes

0notable page changes

Incidents 0

Splunk posted no incidents in October 2025.

CVE-2025-20369 Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise (CVSS 4.6)
CVE-2025-20366 Improper Access Control in Background Job Submission in Splunk Enterprise (CVSS 6.5)
CVE-2025-20370 Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise (CVSS 4.9)
CVE-2025-20367 Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise (CVSS 5.7)
CVE-2025-20371 Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise (CVSS 7.5)
CVE-2025-20368 Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise (CVSS 5.7)

Splunk posted 0 status incidents in October 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.