# Splunk in December 2025: incidents, uptime and changes

> Splunk in December 2025: 0 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 9 CVEs. From Rewindex’s archive of Splunk’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/splunk/2025/12
Last updated: 2026-10-18T17:10:00Z

- Incidents posted: 0 (major/critical: 0) · Maintenance: 0
- By vendor impact label: none
- Uptime (vendor-reported): 100% free of major/critical incidents, 100% free of any incident; outage time 0 min, incident time 0 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 9
- Previous month: [November 2025](https://rewindex.com/company/splunk/2025/11.md) · Next: [February 2026](https://rewindex.com/company/splunk/2026/02.md) · [All months](https://rewindex.com/company/splunk/reports.md) · [Splunk](https://rewindex.com/company/splunk.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

_No incidents posted this month._

## CVEs published

- [CVE-2025-20382](https://rewindex.com/cve/CVE-2025-20382.md) URL validation bypass through Views Dashboard in Splunk Enterprise (CVSS 3.5), published 2025-12-03
- [CVE-2025-20381](https://rewindex.com/cve/CVE-2025-20381.md) SPL commands allowlist controls bypass in Splunk MCP Server app through "run\_splunk\_query" MCP tool (CVSS 5.4), published 2025-12-03
- [CVE-2025-20385](https://rewindex.com/cve/CVE-2025-20385.md) Stored Cross-Site scripting (XSS) through Anchor Tag "href" in Navigation Bar Collections in Splunk Enterprise (CVSS 2.4), published 2025-12-03
- [CVE-2025-20386](https://rewindex.com/cve/CVE-2025-20386.md) Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade (CVSS 8.0), published 2025-12-03
- [CVE-2025-20384](https://rewindex.com/cve/CVE-2025-20384.md) Unauthenticated Log Injection in Splunk Enterprise (CVSS 5.3), published 2025-12-03
- [CVE-2025-20383](https://rewindex.com/cve/CVE-2025-20383.md) Improper access control through push notifications for reports and alerts in Splunk Secure Gateway app (CVSS 4.3), published 2025-12-03
- [CVE-2025-20387](https://rewindex.com/cve/CVE-2025-20387.md) Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade (CVSS 8.0), published 2025-12-03
- [CVE-2025-20389](https://rewindex.com/cve/CVE-2025-20389.md) Improper Input Validation in "label" column field in Splunk Secure Gateway App (CVSS 4.3), published 2025-12-03
- [CVE-2025-20388](https://rewindex.com/cve/CVE-2025-20388.md) Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise (CVSS 2.7), published 2025-12-03

## Cite this

Splunk posted 0 status incidents in December 2025 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/splunk/2025/12
- Citation: Splunk, “Splunk in December 2025” (2025-12-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/splunk/2025/12 (CC BY 4.0).
- Markdown link: `[Splunk: Splunk in December 2025 (2025-12-01)](https://rewindex.com/company/splunk/2025/12)`


---
Canonical: https://rewindex.com/company/splunk/2025/12 · Markdown: https://rewindex.com/company/splunk/2025/12.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:55:11.503Z