Skip to contentElastic Kibana vulnerabilities
- elastic kibanaKibana Broken Access Control issueCVE-2024-37279Fix available4.3 Medium
- elastic kibanaKibana Broken Access Control issueCVE-2024-234466.5 Medium
- elastic kibanaKibana Insertion of Sensitive Information into Log FileCVE-2023-466758.0 High
- elastic kibanaKibana Insertion of Sensitive Information into Log FileCVE-2023-466718.0 High
- elastic kibanaKibana Reporting vulnerabilitiesCVE-2021-221426.6 Medium
- elastic kibanaKibana path traversal issueCVE-2021-221513.1 Low
- elastic kibanaKibana code execution issueCVE-2021-221506.6 Medium
- elastic kibanaKibana Insertion of Sensitive Information into Log FileCVE-2023-314229.0 Critical
- elastic kibanaKibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges...CVE-2023-314158.8 High
- elastic kibanaKibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with...CVE-2023-314148.8 High
- elastic kibanaAn open redirect issue was discovered in Kibana that could lead to a user being redirected to an...CVE-2022-387796.1 Medium
- elastic kibana, decode-uri-component project decode-uri-component +1 moreA flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could...CVE-2022-387786.5 Medium
- elastic kibanaIt was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using...CVE-2021-379365.4 Medium
- elastic kibanaA cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration...CVE-2022-237136.1 Medium
- elastic kibanaA vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring...CVE-2022-237115.3 Medium
- elastic kibanaWithdrawn: Cross-site Scripting in KibanaCVE-2022-237106.1 Medium
- elastic kibanaA flaw was discovered in Kibana in which users with Read access to the Uptime feature could...CVE-2022-237094.3 Medium
- elastic kibanaAn XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an...CVE-2022-237075.4 Medium
- elastic kibanaAn open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user...CVE-2021-221416.1 Medium
- elastic kibanaKibana Sensitive Data DisclosureCVE-2021-37939Fix available2.7 Low
- elastic kibanaIt was discovered that on Windows operating systems specifically, Kibana was not validating a...CVE-2021-379384.3 Medium
- elastic kibanaKibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook...CVE-2021-221396.5 Medium
- elastic kibanaIn Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where...CVE-2021-221363.5 Low
- elastic kibana, redhat openshift container platform +1 moreThe elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana consol…CVE-2020-278166.1 Medium
- elastic kibana, oracle communications billing and revenue management, communications cloud native core network function cloud native environment +1 more +3 moreIn Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS...CVE-2020-7017Fix available6.7 Medium
- elastic kibana, oracle communications billing and revenue management, communications cloud native core network function cloud native environment +1 more +3 moreKibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An...CVE-2020-7016Fix available4.8 Medium
- elastic kibana, redhat openshift container platform +1 moreIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...CVE-2020-107434.3 Medium
- elastic kibanaKibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An...CVE-2020-70155.4 Medium
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An...CVE-2020-70137.2 High
- elastic kibanaKibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the...CVE-2020-7012Public exploitEPSS 18.2%8.8 High
- elastic kibanaKibana versions before 6.8.6 and 7.5.1 contain a cross site scripting (XSS) flaw in the...CVE-2019-76215.4 Medium
- elastic code, kibana +1 moreA local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a...CVE-2019-76186.5 Medium
- elastic kibanaKibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the...CVE-2019-7616Public exploit4.9 Medium
- elastic kibanaKibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit...CVE-2019-76109.0 Critical
- elastic kibanaKibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could...CVE-2019-76086.1 Medium
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion...CVE-2019-7609In KEVPublic exploitEPSS 95.3%10.0 Critical
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console...CVE-2018-17246Public exploitEPSS 84.3%9.8 Critical
- elastic kibanaKibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way...CVE-2018-172459.8 Critical
- elastic kibana, redhat openshift container platform +1 moreKibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source...CVE-2018-38306.1 Medium
- elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 moreElasticsearch subject to cross site scriptingCVE-2018-3824Fix available6.1 Medium
- elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 moreX-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS)...CVE-2018-38235.4 Medium
- elastic kibanaKibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting (XSS)...CVE-2018-38216.1 Medium
- elastic kibanaKibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting (XSS) vulnerability in...CVE-2018-38206.1 Medium
- elastic kibanaThe fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions...CVE-2018-38196.1 Medium
- elastic kibanaKibana versions 5.1.1 to 6.1.2 and 5.6.6 had a cross-site scripting (XSS) vulnerability via the...CVE-2018-38186.1 Medium
- elastic kibanaThe Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana...CVE-2017-114826.1 Medium
- elastic kibanaKibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL...CVE-2017-114816.1 Medium
- elastic kibanaKibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that...CVE-2017-114796.1 Medium
- elastic kibana, kibana x-pack security +1 moreIn Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the...CVE-2017-84436.5 Medium
- elastic kibanaKibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be...CVE-2017-84527.5 High
- Show moreLoading…