Not rated
CVE-2019-7608 Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to…
Description
Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kibana | Versions not published |
References
- discuss.elastic.co discuss.elastic.co
- www.elastic.co www.elastic.co
- RHSA-2019:2860 access.redhat.com
- RHBA-2019:2824 access.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Kibana
The 196 CVEs of Kibana →
CVE-2026-115295
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing…
4.3
Medium
CVE-2026-115294
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to…
7.3
High
CVE-2026-115293
Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure of…
6.5
Medium
CVE-2026-115292
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure…
4.3
Medium