What is the CVSS score of EUVD-2025-32713?

EUVD-2025-32713 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Splunk are affected by EUVD-2025-32713?

CVE-2025-20371 affects Splunk Enterprise and Cloud Platform, allowing unauthenticated attackers to perform server-side request forgery (SSRF) attacks that enable unauthorized REST API calls with…. A patch is available.

How to fix or mitigate EUVD-2025-32713?

Within 24 hours: Identify all Splunk Enterprise and Cloud Platform instances and their current versions. Within 7 days: Deploy patches immediately-upgrade Enterprise to 10.0.1, 9.4.4, 9.3.6, or 9.2.8 (matching your current major version); upgrade Cloud Platform to 9.3.2411.109, 9.3.2408.119, or 9.2.2406.122. Within 30 days: Conduct audit of Splunk API logs and authentication records for unauthorized REST API calls during the vulnerability window; validate all privileged user activities.

Splunk EUVD-2025-32713

| CVE-2025-20371 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2025-10-01 psirt@cisco.com

SSRF Splunk Splunk Cloud Platform

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:26 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

9.2.2406.122,10.0.1,9.3.2411.109

EUVD ID Assigned

Mar 13, 2026 - 18:18 euvd

EUVD-2025-32713

Analysis Generated

Mar 13, 2026 - 18:18 vuln.today

CVE Published

Oct 01, 2025 - 17:15 nvd

HIGH 7.5

DescriptionCVE.org

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery (SSRF) potentially letting an attacker perform REST API calls on behalf of an authenticated high-privileged user.

Analysis

Technical ContextAI

Server-Side Request Forgery allows an attacker to induce the server to make HTTP requests to arbitrary destinations, including internal services. This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918).

RemediationAI

Validate and whitelist allowed URLs and IP ranges. Block requests to internal/private IP ranges. Use network segmentation to limit server-side request scope.

More from same product – last 7 days

CVE-2026-20253 CRITICAL Act Now

9.8 Jun 10

Unauthenticated arbitrary file write in Splunk Enterprise (below 10.2.4 and 10.0.7) and Splunk Cloud Platform (below 10.

CVE-2026-20251 HIGH This Week

8.8 Jun 10

Remote code execution in Splunk Enterprise, Splunk Cloud Platform, and the Splunk Secure Gateway app allows a low-privil

CVE-2026-20258 HIGH This Week

7.1 Jun 10

Stored cross-site scripting in Splunk Enterprise (below 10.2.4, 10.0.7, 9.4.12, 9.3.13) and Splunk Cloud Platform (below

CVE-2026-20254 MEDIUM This Month

5.7 Jun 10

CSS injection in Splunk Enterprise and Splunk Cloud Platform classic dashboards enables credential and sensitive data ex

CVE-2026-20255 MEDIUM This Month

5.7 Jun 10

Classic dashboard URL validation bypass in Splunk Enterprise and Splunk Cloud Platform enables low-privileged authentica

EUVD-2025-32713 vulnerability details – vuln.today

Back

Splunk EUVD-2025-32713

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More from same product – last 7 days

Share

External POC / Exploit Code