| CVE-2023-46675 |
An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error…
|
8.0
High
|
Dec 13, 2023 |
| CVE-2023-46671 |
An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error
|
8.0
High
|
Dec 13, 2023 |
| CVE-2021-22142 |
Kibana contains an embedded version of the Chromium browser that the Reporting feature uses to generate the downloadable…
|
6.6
Medium
|
Nov 22, 2023 |
| CVE-2021-22151 |
It was discovered that Kibana was not validating a user supplied path, which would load .pbf files
|
3.1
Low
|
Nov 22, 2023 |
| CVE-2021-22150 |
It was discovered that a user with Fleet admin permissions could upload a malicious package
|
6.6
Medium
|
Nov 22, 2023 |
| CVE-2023-31422 |
An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error
|
9.0
Critical
|
Oct 26, 2023 |
| CVE-2023-31415 |
Kibana version 8.7.0 contains an arbitrary code execution flaw
|
9.9
Critical
|
May 4, 2023 |
| CVE-2023-31414 |
Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw
|
8.2
High
|
May 4, 2023 |
| CVE-2022-38779 |
An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if…
|
Not rated
|
Feb 21, 2023 |
| CVE-2022-38778 |
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated…
|
6.5
Medium
|
Feb 8, 2023 |
| CVE-2021-37936 |
It was discovered that Kibana was not sanitizing document fields containing HTML snippets
|
5.4
Medium
|
Nov 18, 2022 |
| CVE-2021-22141 |
An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16
|
6.1
Medium
|
Nov 18, 2022 |
| CVE-2022-23713 |
A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow…
|
Not rated
|
Jul 6, 2022 |
| CVE-2022-23711 |
A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page…
|
Not rated
|
Apr 21, 2022 |
| CVE-2022-23710 |
A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern…
|
Not rated
|
Mar 3, 2022 |
| CVE-2022-23709 |
A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules
|
Not rated
|
Mar 3, 2022 |
| CVE-2022-23707 |
An XSS vulnerability was found in Kibana index patterns
|
Not rated
|
Feb 11, 2022 |
| CVE-2021-37939 |
It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on…
|
Not rated
|
Nov 18, 2021 |
| CVE-2021-37938 |
It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path,…
|
Not rated
|
Nov 18, 2021 |
| CVE-2021-22139 |
Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack…
|
Not rated
|
May 13, 2021 |
| CVE-2021-22136 |
In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the…
|
Not rated
|
May 13, 2021 |
| CVE-2020-7017 |
In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw
|
Not rated
|
Jul 27, 2020 |
| CVE-2020-7016 |
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion
|
Not rated
|
Jul 27, 2020 |
| CVE-2020-7013 |
Kibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB
|
Not rated
|
Jun 3, 2020 |
| CVE-2020-7015 |
Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization
|
Not rated
|
Jun 3, 2020 |