elk vulnerabilities (Bitnami)
116 vulnerabilities.
elkBitnamiAuthorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure4.3 MediumelkBitnamiIncorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise4.3 MediumelkBitnamiMissing Authorization in Kibana Leading to Unauthorized Information Disclosure4.3 MediumelkBitnamiIncomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery5.0 MediumelkBitnamiMissing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions6.3 MediumelkBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumelkBitnamiAuthorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity Compromise7.1 HighelkBitnamiImproper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure5.4 MediumelkBitnamiAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service6.5 MediumelkBitnamiUnintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information Exposure4.3 MediumelkBitnamiServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access6.3 MediumelkBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumelkBitnamiImproper Input Validation in Kibana Fleet Leading to Privilege Escalation7.2 HighelkBitnamiServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access7.7 HighelkBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumelkBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumelkBitnamiImproper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML Injection4.1 MediumelkBitnamiOperation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access5.3 MediumelkBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumelkBitnamiPath Traversal in Kibana Leading to Unauthorized Deletion of User Accounts4.6 MediumelkBitnamiServer-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure6.8 MediumelkBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumelkBitnamiIncorrect Authorization in Kibana Fleet Leading to Information Disclosure4.3 MediumelkBitnamiIncorrect Authorization in Kibana Fleet Leading to Information Disclosure7.7 HighelkBitnamiExecution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope7.7 HighelkBitnamiImproper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF)8.6 HighelkBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumelkBitnamiInefficient Regular Expression Complexity in Kibana Leading to Denial of Service4.9 MediumelkBitnamiImproper Input Validation in Kibana Leading to Denial of Service6.5 MediumelkBitnamiImproper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service6.5 MediumelkBitnamiExternal Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector8.6 HighelkBitnamiImproper Input Validation in Kibana Email Connector Leading to Excessive Allocation6.5 MediumelkBitnamiAllocation of Resources Without Limits or Throttling in Kibana Fleet6.5 MediumelkBitnamiAllocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation6.5 MediumelkBitnamiKibana Improper Authorization4.3 MediumelkBitnamiKibana Improper Authorization4.3 MediumelkBitnamiKibana Allocation of Resources Without Limits or Throttling6.5 MediumelkBitnamiKibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.1 MediumelkBitnamiKibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7.2 HighelkBitnamiKibana Cross-site Scripting via the Integration Package Upload Functionality5.4 MediumelkBitnamiKibana Origin Validation Error4.3 MediumelkBitnamiKibana Stored Cross-Site Scripting (XSS)8.2 HighelkBitnamiKibana Stored Cross-Site Scripting (XSS)8.7 HighelkBitnamiKibana Cross-Site Scripting (XSS)8.7 HighelkBitnamiKibana Insufficiently Protected Credentials in the CrowdStrike Connector5.4 MediumelkBitnamiKibana privilege escalation via reporting_user role6.5 MediumelkBitnamiKibana Open Redirect4.3 MediumelkBitnamiKibana Improper Authorization7.6 HighelkBitnamiKibana arbitrary code execution via prototype pollution9.1 CriticalelkBitnamiKibana Unrestricted Upload of File with Dangerous Type Can Lead to XSS5.4 Medium- Show moreLoading…