[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjcth351dg7PfjTLN93pIogd4TDB_KNCJd8whChPZMsM":3,"g5a-risk:CVE-2025-20231":130},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":28,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":60,"weaknesses":61,"weaknessesCount":60,"isActivelyExploited":70,"cisaInfo":28,"otxData":28,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":125,"notableEvents":126},"CVE-2025-20231","What is CVE-2025-20231?","In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could run a search using the permissions of a higher-privileged user that could lead to disclosure of sensitive information.The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The authenticated low-privileged user should not be able to exploit the vulnerability at will.","In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Pla...","2025-03-26T22:15:15.083","2025-07-21T20:48:56.213",5.7,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"psirt@cisco.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":23,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":23,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","LOW","REQUIRED","UNCHANGED",7.1,null,1.2,5.9,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":24,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":12,"BaseSeverity":36,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":35,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"NONE","MEDIUM",2.1,3.6,0.0052,[39,39,39,39,39,39,39],"Medium",[43,47,50],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"splunk","*","cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*",{"vendor":44,"product":44,"version":48,"criteria":49,"vulnerable":4},"9.4.0","cpe:2.3:a:splunk:splunk:9.4.0:*:*:*:enterprise:*:*:*",{"vendor":44,"product":51,"version":45,"criteria":52,"vulnerable":4},"splunk_secure_gateway","cpe:2.3:a:splunk:splunk_secure_gateway:*:*:*:*:*:*:*:*",3,[55],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fadvisory.splunk.com\u002Fadvisories\u002FSVD-2025-0302","Splunk",[59],"Vendor Advisory",1,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2025-20231? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-20231, a medium severity cyber security vulnerability from 2025. In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, ...","CVE-2025-20231, CVE-2025-20231 vulnerability, CVE-2025-20231 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, splunk security, splunk vulnerability, splunk_secure_gateway vulnerability","\u002Fwhat-is\u002Fcve-2025-20231",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-20231","Cybersecurity","CVE-2025-20231, CVE-2025-20231 vulnerability, CVE-2025-20231 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":28,"Negate":28,"Nodes":99},[100],{"Operator":101,"Negate":28,"CPEMatch":102},"OR",[103,107,111,115,117,121],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":104,"VersionStartExcluding":28,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":28},"49EE75F0-2AD6-4712-9E2A-C000A44E5605","9.1.0","9.1.8",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":108,"VersionStartExcluding":28,"VersionStartIncluding":109,"VersionEndExcluding":110,"VersionEndIncluding":28},"5B7E20B1-E38E-4F5E-9F89-41FD4C231742","9.2.0","9.2.5",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":112,"VersionStartExcluding":28,"VersionStartIncluding":113,"VersionEndExcluding":114,"VersionEndIncluding":28},"E66E66BA-AFC2-4E0A-B233-9E2C7D985AF0","9.3.0","9.3.3",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":116,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"AD39F156-52DB-4F43-8528-37500E3AEB89",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":118,"VersionStartExcluding":28,"VersionStartIncluding":119,"VersionEndExcluding":120,"VersionEndIncluding":28},"3B85AEDE-7363-42D5-8F3C-1865BB39166C","3.7.0","3.7.23",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":122,"VersionStartExcluding":28,"VersionStartIncluding":123,"VersionEndExcluding":124,"VersionEndIncluding":28},"6DD62957-0C8B-49FC-BC63-2E0CDC041021","3.8.0","3.8.38",[],[],{"lastModified":11,"cacheTime":128,"version":129},1792356158818,"2.0",{"score":131,"band":41,"action":132,"scoredAt":133},45,"Plan remediation","2026-10-16T07:06:31.67457+00:00"]