| CVE-2020-7012 |
Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant
|
Not rated
|
Jun 3, 2020 |
| CVE-2019-7621 |
Kibana versions before 6.8.6 and 7.5.1 contain a cross site scripting (XSS) flaw in the coordinate and region map…
|
Not rated
|
Dec 18, 2019 |
| CVE-2019-7616 |
Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for…
|
Not rated
|
Jul 30, 2019 |
| CVE-2019-7608 |
Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to…
|
Not rated
|
Mar 25, 2019 |
| CVE-2019-7610 |
Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger
|
Not rated
|
Mar 25, 2019 |
| CVE-2019-7609 |
Exploited
Kibana Arbitrary Code Execution
|
9.8
Critical
|
Mar 25, 2019 |
| CVE-2018-17246 |
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin
|
Not rated
|
Dec 20, 2018 |
| CVE-2018-17245 |
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are…
|
Not rated
|
Dec 20, 2018 |
| CVE-2018-3830 |
Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that…
|
Not rated
|
Sep 19, 2018 |
| CVE-2018-3821 |
Kibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting (XSS) vulnerability in the tag cloud…
|
Not rated
|
Mar 30, 2018 |
| CVE-2018-3820 |
Kibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting (XSS) vulnerability in labs visualizations…
|
Not rated
|
Mar 30, 2018 |
| CVE-2018-3819 |
The fix in Kibana for ESA-2017-23 was incomplete
|
Not rated
|
Mar 30, 2018 |
| CVE-2018-3818 |
Kibana versions 5.1.1 to 6.1.2 and 5.6.6 had a cross-site scripting (XSS) vulnerability via the colored fields formatter…
|
Not rated
|
Mar 30, 2018 |
| CVE-2017-11482 |
The Kibana fix for CVE-2017-8451 was found to be incomplete
|
Not rated
|
Dec 8, 2017 |
| CVE-2017-11481 |
Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could…
|
Not rated
|
Dec 8, 2017 |
| CVE-2017-8452 |
Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after…
|
Not rated
|
Jun 16, 2017 |
| CVE-2016-10366 |
Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack
|
Not rated
|
Jun 16, 2017 |
| CVE-2016-10365 |
Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link…
|
Not rated
|
Jun 16, 2017 |
| CVE-2015-9056 |
Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack
|
Not rated
|
Jun 16, 2017 |
| CVE-2017-8440 |
Starting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover page that could allow…
|
Not rated
|
Jun 5, 2017 |
| CVE-2017-8439 |
Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder
|
Not rated
|
Jun 5, 2017 |