| CVE-2025-25014 |
A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine…
|
9.1
Critical
|
May 6, 2025 |
| CVE-2025-25015 |
Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted…
|
9.9
Critical
|
Mar 5, 2025 |
| CVE-2024-37285 |
A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document…
|
9.1
Critical
|
Nov 14, 2024 |
| CVE-2024-37288 |
A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document…
|
9.9
Critical
|
Sep 9, 2024 |
| CVE-2024-37287 |
A flaw allowing arbitrary code execution was discovered in Kibana
|
9.1
Critical
|
Aug 13, 2024 |
| CVE-2023-31422 |
An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error
|
9.0
Critical
|
Oct 26, 2023 |
| CVE-2023-31415 |
Kibana version 8.7.0 contains an arbitrary code execution flaw
|
9.9
Critical
|
May 4, 2023 |
| CVE-2019-7609 |
Exploited
Kibana Arbitrary Code Execution
|
9.8
Critical
|
Mar 25, 2019 |