AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-20387

HIGH · CVSS 8 EPSS 0.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-03 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.0. It affects Windows.

CVE
CVE-2025-20387
Severity
HIGH
CVSS
8
EPSS
0.48%
Windows

Original NVD Description

In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on the machine access the directory and all its contents.

Related CVEs

Other vulnerabilities affecting the same vendor(s)