Description
In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208 and 9.1.2308.214, a low-privileged user that does not hold the "admin" or "power" Splunk roles could bypass the external content warning modal dialog box in Dashboard Studio dashboards which could lead to an information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Splunk | Splunk Enterprise | 9.4 – < 9.4.1, 9.3 – < 9.3.3, 9.2 – < 9.2.5, 9.1 – < 9.1.8 | 9.4.1 |
| Splunk | Splunk Cloud Platform | 9.3.2408 – < 9.3.2408.107, 9.2.2406 – < 9.2.2406.113, 9.2.2403 – < 9.2.2403.115, 9.1.2312 – < 9.1.2312.208, 9.1.2308 – < 9.1.2308.214 | 9.3.2408.107 |
Advisories 2
- WID-SEC-2025-0647 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 9, 2026
- NCSC-2025-0099 Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform NCSC-NL (Netherlands) · Mar 27, 2025