Baku: The Electronic Security Service (ESS) under the Ministry of Digital Development and Transport has discovered a vulnerability (CVE-2025-20371) in Splunk Enterprise and Splunk Cloud, ESS told APA-Economics. It was noted that cyber fraudsters who take advantage of this vulnerability can obtain sensitive information about internal services.
According to Azeri-Press News Agency, the vulnerability presents a significant risk to organizations using these systems for managing and analyzing their data. ESS has urged companies using Splunk Enterprise and Splunk Cloud to take precautionary measures to safeguard their information from potential cyber threats.
The Electronic Security Service has been actively monitoring this situation and is working closely with affected organizations to mitigate any risks associated with the vulnerability. They have also recommended that users of Splunk systems apply necessary updates and patches as soon as they become available to enhance their cybersecurity posture.
The identification of this vulnerability underscores the challenges faced by companies in protecting their digital infrastructures and the importance of staying vigilant against evolving cyber threats.