Splunk Products Multiple Vulnerabilities

Release Date: 17 Jan 2025 404 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Splunk Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and security restriction bypass on the targeted system.

Impact

Denial of Service
Elevation of Privilege

System / Technologies affected

Splunk Supporting Add-on for Active Directory version below 3.1.1
Splunk App for SOAR version below 1.0.71

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

https://advisory.splunk.com/advisories/SVD-2025-0103
https://advisory.splunk.com/advisories/SVD-2025-0101

Vulnerability Identifier

CVE-2025-0367
CVE-2025-22621

Source

Splunk