Threats affecting pkg:github/splunk/universalforwarder

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.0	EPSS 0.3%	CVE-2025-20298Splunk/UniversalForwarder for Windows · The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. High8.0EPSS 0.3%2025-06-02CVE Database V5CVE-2025-20298 In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machine access the directory and all its contents. EPSS 0.3%Vulnerability	CVE Database V5	2025-06-02

Page 1 of 1