Elasticsearch

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Elasticsearch records in CISA KEV

No Elasticsearch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Packetbeat 6 records LOW Elasticsearch 4 records HIGH Kibana 3 records LOW Logstash 3 records LOW Cloud Enterprise 1 record LOW Output Plugin 1 record LOW X-pack 1 record LOW X-pack Reporting 1 record LOW

Records

3 records in Kibana · all components

TI-2020-05665 CVE-2020-7017 · GHSA-68q8-gcx9-m4rq

Cross-site scripting in Elastic Kibana

LOW 32

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw.

CVSS 3.1MEDIUM 6.7 Network Low privileges User interaction EPSS 0.0122 Published 2020-07-27 Fix deferred CWE-79

TI-2017-08493 CVE-2017-11479 · GHSA-3chc-mx35-j8gg

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion…

LOW 29

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01071 Published 2017-09-28 No fix listed CWE-79

TI-2020-05664 CVE-2020-7016 · GHSA-hrj2-4hpm-cjw9

Uncontrolled resource consumption in Elastic Kibana

LOW 24

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion.

CVSS 3.1MEDIUM 4.8 Network Low privileges User interaction EPSS 0.01085 Published 2020-07-27 Fix deferred CWE-185

Open these records in search →

Critical	0
High	5
Medium	14
Low	0
No CVSS	0