Splunk Universalforwarder For Windows vulnerabilities

1 known vulnerability affecting splunk/splunk_universalforwarder_for_windows.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-20298HIGHCVSS 8.0≥ 9.4, < 9.4.2≥ 9.3, < 9.3.4+2 more2025-06-02

CVE-2025-20298 [HIGH] CWE-732 CVE-2025-20298: In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machi