kibana vulnerabilities (Bitnami)
116 vulnerabilities.
kibanaBitnamiAuthorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure4.3 MediumkibanaBitnamiIncorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise4.3 MediumkibanaBitnamiMissing Authorization in Kibana Leading to Unauthorized Information Disclosure4.3 MediumkibanaBitnamiIncomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery5.0 MediumkibanaBitnamiMissing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions6.3 MediumkibanaBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiAuthorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity Compromise7.1 HighkibanaBitnamiImproper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure5.4 MediumkibanaBitnamiAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiUnintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information Exposure4.3 MediumkibanaBitnamiServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access6.3 MediumkibanaBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiImproper Input Validation in Kibana Fleet Leading to Privilege Escalation7.2 HighkibanaBitnamiServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access7.7 HighkibanaBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiImproper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML Injection4.1 MediumkibanaBitnamiOperation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access5.3 MediumkibanaBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiPath Traversal in Kibana Leading to Unauthorized Deletion of User Accounts4.6 MediumkibanaBitnamiServer-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure6.8 MediumkibanaBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiIncorrect Authorization in Kibana Fleet Leading to Information Disclosure4.3 MediumkibanaBitnamiIncorrect Authorization in Kibana Fleet Leading to Information Disclosure7.7 HighkibanaBitnamiExecution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope7.7 HighkibanaBitnamiImproper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF)8.6 HighkibanaBitnamiUncontrolled Resource Consumption in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiInefficient Regular Expression Complexity in Kibana Leading to Denial of Service4.9 MediumkibanaBitnamiImproper Input Validation in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiImproper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service6.5 MediumkibanaBitnamiExternal Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector8.6 HighkibanaBitnamiImproper Input Validation in Kibana Email Connector Leading to Excessive Allocation6.5 MediumkibanaBitnamiAllocation of Resources Without Limits or Throttling in Kibana Fleet6.5 MediumkibanaBitnamiAllocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation6.5 MediumkibanaBitnamiKibana Improper Authorization4.3 MediumkibanaBitnamiKibana Improper Authorization4.3 MediumkibanaBitnamiKibana Allocation of Resources Without Limits or Throttling6.5 MediumkibanaBitnamiKibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.1 MediumkibanaBitnamiKibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7.2 HighkibanaBitnamiKibana Cross-site Scripting via the Integration Package Upload Functionality5.4 MediumkibanaBitnamiKibana Origin Validation Error4.3 MediumkibanaBitnamiKibana Stored Cross-Site Scripting (XSS)8.2 HighkibanaBitnamiKibana Stored Cross-Site Scripting (XSS)8.7 HighkibanaBitnamiKibana Cross-Site Scripting (XSS)8.7 HighkibanaBitnamiKibana Insufficiently Protected Credentials in the CrowdStrike Connector5.4 MediumkibanaBitnamiKibana privilege escalation via reporting_user role6.5 MediumkibanaBitnamiKibana Open Redirect4.3 MediumkibanaBitnamiKibana Improper Authorization7.6 HighkibanaBitnamiKibana arbitrary code execution via prototype pollution9.1 CriticalkibanaBitnamiKibana Unrestricted Upload of File with Dangerous Type Can Lead to XSS5.4 Medium- Show moreLoading…