[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGHfBoTiBcreT4jHAWIT_bfWIuqoagr4qW9W9YhtTppM":3,"g5a-ex:splunk\u002Fsplunk_secure_gateway@*":53,"g5a-family:splunk\u002Fsplunk_secure_gateway":55},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":30,"seoMetadata":31,"meta":50},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"splunk","splunk_secure_gateway",0,2,"2025-03-26",[],"Splunk Secure Gateway by Splunk is a technology product and 2 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2025-20231","In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a search using the permissions of a higher-privileged user that could lead to disclosure of sensitive information.\u003Cbr>\u003Cbr>The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The authenticated low-privileged user should not be able to exploit the vulnerability at will.",7.1,"v3.1","High",false,0.0052,{"cveId":25,"description":26,"publishedDate":11,"cvssScore":27,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":29},"CVE-2025-20230","In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could edit and delete other user data in App Key Value Store (KVStore) collections that the Splunk Secure Gateway app created. This is due to missing access control and incorrect ownership of the data in those KVStore collections.\u003Cbr>\u003Cbr>In the affected versions, the `nobody` user owned the data in the KVStore collections. This meant that there was no specific owner assigned to the data in those collections.",4.3,"Medium",0.00319,[],{"title":32,"metaDescription":33,"keywords":34,"structuredData":35},"Splunk Secure Gateway by Splunk - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Splunk Secure Gateway by Splunk with 2 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Splunk Secure Gateway vulnerabilities, Splunk Secure Gateway security, Splunk Secure Gateway CVE, Splunk Splunk Secure Gateway, Splunk Secure Gateway threat intelligence, Splunk security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":36,"@type":37,"name":38,"description":33,"url":39,"manufacturer":40,"applicationCategory":44,"softwareVersion":45,"mainEntity":46},"https:\u002F\u002Fschema.org","SoftwareApplication","Splunk Secure Gateway","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsplunk\u002Fsplunk_secure_gateway",{"@type":41,"name":42,"url":43},"Organization","Splunk","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsplunk","Security Software","Multiple versions",{"@type":47,"name":48,"description":49,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Splunk Secure Gateway Security Vulnerabilities","Security vulnerabilities affecting Splunk Secure Gateway by Splunk",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":51,"apiVersion":52},"2026-10-17T14:10:12.900Z","3.0",{"rows":54,"total":9,"capped":22,"failed":9},[],[]]