Aller au contenu

Vulnérabilités de Elastic Kibana

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-25014 A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine… 9.1 Critique 6 mai 2025
CVE-2025-25015 Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted… 9.9 Critique 5 mars 2025
CVE-2024-37285 A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document… 9.1 Critique 14 nov. 2024
CVE-2024-37288 A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document… 9.9 Critique 9 sept. 2024
CVE-2024-37287 A flaw allowing arbitrary code execution was discovered in Kibana 9.1 Critique 13 août 2024
CVE-2023-31422 An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error 9.0 Critique 26 oct. 2023
CVE-2023-31415 Kibana version 8.7.0 contains an arbitrary code execution flaw 9.9 Critique 4 mai 2023
CVE-2019-7609 Exploitée Kibana Arbitrary Code Execution 9.8 Critique 25 mars 2019

Autres produits Elastic