Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Elastic Kibana — RHSA-2019:2860 Clear all filters
TI-2019-05364 CVE-2019-7610 · GHSA-rrx3-4wcg-f297

Code injection in Elastic Kibana

Priority MEDIUM 45

Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger.

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.03894 Published 2019-03-25 Fixed in 6.6.1 CWE-94
TI-2019-05362 CVE-2019-7608 · GHSA-24qm-h8fv-cv5c

Cross-site scripting in Elastic Kibana

Priority LOW 30

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01333 Published 2019-03-25 Fixed CWE-79
TI-2019-05363 CVE-2019-7609 · GHSA-cp8f-5jp9-rqmh

Code injection in Elastic Kibana

Priority CRITICAL 100KEV

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.95338 Published 2019-03-25 Fixed CWE-94