Splunk in December 2025: incidents, uptime and changes

Name: Splunk status incidents and page changes, December 2025
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

0incidents posted

0labelled major or critical

0price changes

0notable page changes

Incidents 0

Splunk posted no incidents in December 2025.

CVE-2025-20382 URL validation bypass through Views Dashboard in Splunk Enterprise (CVSS 3.5)
CVE-2025-20381 SPL commands allowlist controls bypass in Splunk MCP Server app through "run_splunk_query" MCP tool (CVSS 5.4)
CVE-2025-20385 Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise (CVSS 2.4)
CVE-2025-20386 Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade (CVSS 8.0)
CVE-2025-20384 Unauthenticated Log Injection in Splunk Enterprise (CVSS 5.3)
CVE-2025-20383 Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app (CVSS 4.3)
CVE-2025-20387 Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade (CVSS 8.0)
CVE-2025-20389 Improper Input Validation in "label" column field in Splunk Secure Gateway App (CVSS 4.3)
CVE-2025-20388 Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise (CVSS 2.7)

Splunk posted 0 status incidents in December 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.