VDB
CVE-2025-20387
CVE-2025-20387
PUBLISHED
De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
EPSS 0.03% · 8.6th percentile
Risk Scores
EPSS Score
0.03%
8.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk Secure Gateway | |
| Splunk | Splunk |
Timeline
- Oct 10, 2024 CVE ID Reserved
- Dec 3, 2025 CVE Published
- Dec 4, 2025 EPSS Score
- Dec 8, 2025 EPSS Score
- Dec 13, 2025 EPSS Score
- Dec 17, 2025 EPSS Score
- Dec 22, 2025 EPSS Score
- Dec 26, 2025 EPSS Score
- Dec 30, 2025 EPSS Score
- Jan 4, 2026 EPSS Score
- Jan 8, 2026 EPSS Score
- Jan 12, 2026 EPSS Score
References
- https://cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-1063/ advisory
- https://advisory.splunk.com/advisories/SVD-2025-1205 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1201 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1208 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1204 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1207 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1203 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1206 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1202 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1209 advisory
- https://advisory.splunk.com/advisories/SVD-2025-1210 advisory