CVE-2025-20227

Summary

CVE-2025-20227 is a vulnerability affecting Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, as well as Splunk Cloud Platform versions below 9.3.2408.107, 9.2.2406.112, 9.2.2403.115, 9.1.2312.208, and 9.1.2308.214. This issue allows a low-privileged user, without the "admin" or "power" roles, to bypass the external content warning modal dialog box in Dashboard Studio dashboards. Successful exploitation could result in information disclosure. Splunk users are advised to update their systems to the latest versions to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.