| CVE-2023-46675 |
An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error…
|
8.0
Élevée
|
13 déc. 2023 |
| CVE-2023-46671 |
An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error
|
8.0
Élevée
|
13 déc. 2023 |
| CVE-2021-22142 |
Kibana contains an embedded version of the Chromium browser that the Reporting feature uses to generate the downloadable…
|
6.6
Moyenne
|
22 nov. 2023 |
| CVE-2021-22151 |
It was discovered that Kibana was not validating a user supplied path, which would load .pbf files
|
3.1
Faible
|
22 nov. 2023 |
| CVE-2021-22150 |
It was discovered that a user with Fleet admin permissions could upload a malicious package
|
6.6
Moyenne
|
22 nov. 2023 |
| CVE-2023-31422 |
An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error
|
9.0
Critique
|
26 oct. 2023 |
| CVE-2023-31415 |
Kibana version 8.7.0 contains an arbitrary code execution flaw
|
9.9
Critique
|
4 mai 2023 |
| CVE-2023-31414 |
Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw
|
8.2
Élevée
|
4 mai 2023 |
| CVE-2022-38779 |
An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if…
|
Non notée
|
21 févr. 2023 |
| CVE-2022-38778 |
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated…
|
6.5
Moyenne
|
8 févr. 2023 |
| CVE-2021-37936 |
It was discovered that Kibana was not sanitizing document fields containing HTML snippets
|
5.4
Moyenne
|
18 nov. 2022 |
| CVE-2021-22141 |
An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16
|
6.1
Moyenne
|
18 nov. 2022 |
| CVE-2022-23713 |
A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow…
|
Non notée
|
6 juil. 2022 |
| CVE-2022-23711 |
A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page…
|
Non notée
|
21 avr. 2022 |
| CVE-2022-23710 |
A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern…
|
Non notée
|
3 mars 2022 |
| CVE-2022-23709 |
A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules
|
Non notée
|
3 mars 2022 |
| CVE-2022-23707 |
An XSS vulnerability was found in Kibana index patterns
|
Non notée
|
11 févr. 2022 |
| CVE-2021-37939 |
It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on…
|
Non notée
|
18 nov. 2021 |
| CVE-2021-37938 |
It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path,…
|
Non notée
|
18 nov. 2021 |
| CVE-2021-22139 |
Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack…
|
Non notée
|
13 mai 2021 |
| CVE-2021-22136 |
In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the…
|
Non notée
|
13 mai 2021 |
| CVE-2020-7017 |
In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw
|
Non notée
|
27 juil. 2020 |
| CVE-2020-7016 |
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion
|
Non notée
|
27 juil. 2020 |
| CVE-2020-7013 |
Kibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB
|
Non notée
|
3 juin 2020 |
| CVE-2020-7015 |
Kibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization
|
Non notée
|
3 juin 2020 |