CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Java. Its EPSS score suggests a 17.8% probability of exploitation in the next 30 days.
CVE
CVE-2025-20297
Severity
MEDIUM
CVSS
4.3
EPSS
17.85%
Java
Original NVD Description
In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint that could result in execution of unauthorized JavaScript code in the browser of a user.
Related CVEs
Other vulnerabilities affecting the same vendor(s)