Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

TI-2020-05665 CVE-2020-7017 · GHSA-68q8-gcx9-m4rq

Cross-site scripting in Elastic Kibana

Priority LOW 32

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw.

CVSS 3.1MEDIUM 6.7 Network Low privileges User interaction EPSS 0.0122 Published 2020-07-27 Fix deferred CWE-79
Priority LOW 24

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion.

CVSS 3.1MEDIUM 4.8 Network Low privileges User interaction EPSS 0.01085 Published 2020-07-27 Fix deferred CWE-185