Splunk has released security updates to address multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, sensitive information disclosure, security restriction bypass, data manipulation, denial of service condition and cross-site scripting on the targeted system. Issues affect:

• Splunk Enterprise versions below 9.2.10, 9.4.6, 9.3.8 and 10.0.2;
• Splunk Cloud Platform versions below 9.3.2411.120, 10.0.2503.8 and 10.1.2507.10;
• Splunk Secure Gateway versions below 3.7.28, 3.8.58 and 3.9.10;
• Splunk MCP Server versions below 0.2.4.

More information on vulnerabilities and updates is available in the Splunk security advisories:

• SVD-2025-1201
• SVD-2025-1202
• SVD-2025-1203
• SVD-2025-1204
• SVD-2025-1205
• SVD-2025-1206
• SVD-2025-1207
• SVD-2025-1208
• SVD-2025-1210