What’s Vulnerable › Products

Splunk Universal Forwarder vulnerabilities

61 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Splunk Universal Forwarder version is affected

Latest Splunk Universal Forwarder vulnerabilities

• CVE-2025-20298 — Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade (CVSS 8.0)
• CVE-2023-27538 — (CVSS 5.5)
• CVE-2023-27537 — (CVSS 5.9)
• CVE-2023-27536 — (CVSS 5.9)
• CVE-2023-27535 — (CVSS 5.9)
• CVE-2023-27534 — (CVSS 8.8)
• CVE-2023-27533 — (CVSS 8.8)
• CVE-2023-23916 — (CVSS 6.5)
• CVE-2023-23915 — (CVSS 6.5)
• CVE-2023-23914 — (CVSS 9.1)
• CVE-2022-43552 — (CVSS 5.9)
• CVE-2022-43551 — (CVSS 7.5)
• CVE-2022-35260 — (CVSS 6.5)
• CVE-2022-32221 — (CVSS 9.8)
• CVE-2022-36227 — (CVSS 9.8)
• CVE-2022-42915 — (CVSS 8.1)
• CVE-2022-42916 — (CVSS 7.5)
• CVE-2022-35252 — (CVSS 3.7)
• CVE-2021-31566 — (CVSS 7.8)
• CVE-2022-37439 — Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input (CVSS 5.5)
• CVE-2022-35737 — (CVSS 7.5)
• CVE-2022-32208 — (CVSS 5.9)
• CVE-2022-32207 — (CVSS 9.8)
• CVE-2022-32206 — (CVSS 6.5)
• CVE-2022-32205 — (CVSS 4.3)