Elastic X-pack vulnerabilities

• elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 more Elasticsearch subject to cross site scripting CVE-2018-3824 Fix available 6.1 MediumSeptember 19, 2018
• elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 more X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS)... CVE-2018-3823 5.4 MediumSeptember 19, 2018
• elastic x-pack, x-pack security +1 more X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack... CVE-2018-3822 9.8 CriticalMarch 30, 2018
• elastic x-pack alerting, x-pack +1 more An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users... CVE-2017-8448 8.8 HighSeptember 28, 2017
• elastic x-pack security, x-pack +1 more An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has... CVE-2017-8447 6.5 MediumSeptember 28, 2017
• elasticsearch x-pack, elastic x-pack reporting +1 more Improper Privilege Management in X-Pack CVE-2017-8446 Fix available 5.3 MediumAugust 18, 2017
• elastic x-pack security, x-pack +1 more An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If... CVE-2017-8445 5.5 MediumAugust 18, 2017
• elastic elasticsearch x-pack security, x-pack +1 more Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the... CVE-2017-8442 6.5 MediumJuly 7, 2017
• elastic kibana, kibana x-pack security +1 more In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the... CVE-2017-8443 6.5 MediumJune 30, 2017
• elastic kibana, x-pack security +1 more With X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the... CVE-2017-8451 6.1 MediumJune 16, 2017
• elastic x-pack, x-pack security +1 more X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi... CVE-2017-8450 7.5 HighJune 16, 2017
• elastic x-pack security, x-pack +1 more X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the... CVE-2017-8449 5.9 MediumJune 16, 2017
• elastic kibana, x-pack security +1 more With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests... CVE-2016-10364 6.5 MediumJune 16, 2017
• elastic x-pack, x-pack security +1 more Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document... CVE-2017-8441 4.3 MediumJune 5, 2017
• elastic x-pack, x-pack security +1 more Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as... CVE-2017-8438 8.8 HighJune 5, 2017