Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2017-11479

kibana: XSS vulnerability in Timelion could allow an attacker obtain sensitive information or perform user actions

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Elastic Elasticsearch
Products
Kibana Kibana
CVE-2020-7017

kibana: stored XSS in region map visualization

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

CVSS 3.1 · 6.7 Medium EPSS 1.2% KEV · Not listed
Vendors
Elasticsearch Oracle
Products
Kibana Communications Billing And Revenue Management Communications Cloud Native Core Network Function Cloud Native Environment and 1 more
CVE-2020-7016

kibana: DoS in Timelion

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.

CVSS 3.1 · 4.8 Medium EPSS 1.1% KEV · Not listed
Vendors
Elasticsearch Oracle
Products
Kibana Communications Billing And Revenue Management Communications Cloud Native Core Network Function Cloud Native Environment and 1 more