Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Elastic Kibana 8.15.0 Clear all filters
TI-2024-29308 CVE-2024-43707 · GHSA-54qw-wcc8-qjp6

Kibana exposure of sensitive information to an unauthorized actor

Priority LOW 34

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00416 Published 2025-01-23 Fixed in 8.15.0 CWE-200
TI-2024-29311 CVE-2024-43710 · GHSA-5vxg-7wx9-4fp4

Kibana server-side request forgery

Priority LOW 20

A server side request forgery vulnerability was identified in Kibana where the /api/fleet/health_check API could be used to send requests to internal endpoints.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00268 Published 2025-01-23 Fixed in 8.15.0 CWE-918