CVE-2025-20389CWE-20

Improper Input Validation in "label" column field in Splunk Secure Gateway App

Medium · published December 3, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and versions below 3.9.10, 3.8.58 and 3.7.28 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the `label` column field after adding a new device in the Splunk Secure Gateway app. This could potentially lead to a client-side denial of service (DoS).

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00415 · 34.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-12-03T17:00Z
EPSS history
Timeline
  • 03 DEC 17:00Z
    Improper Input Validation in "label" column field in Splunk Secure Gateway App
    cvelistv5