Approved changes feed: RSS · Atom

cpe:2.3:a:splunk:splunk/universalforwarder_for_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSplunk (0f7ef08f-e3f5-59a4-ba5f-26afb7835b46)
ProductSplunk/Universalforwarder For Windows (35059116-3043-51f9-9f8b-ef0ab7ca1114)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-20298 vulnerable 2026-06-03 14:59:14.207861 Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade
HIGH (8)
In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machine access the directory and all its contents.
Published: 2025-06-02T17:14:03.786Z
Updated: 2025-06-02T17:24:12.974Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.