Known vulnerabilities in Kibana - page 10

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153932 - Authorization Bypass Through User-Controlled Key
CVE-2026-102406
CWE-639 Medium
No
No
8.19.22, 9.4.7, 9.5.4 07.10.2026 SB20261007239
#VU153931 - Missing Authorization
CVE-2026-102410
CWE-862 Low
No
No
9.3.0, 9.4.0 07.10.2026 SB20261007238
#VU153930 - Incorrect Authorization
CVE-2026-102412
CWE-863 Low
No
No
9.4.8, 9.5.5 07.10.2026 SB20261007237
#VU16834 - Exposure of sensitive information to an unauthorized actor
CVE-2018-17244
CWE-200 Low
No
No
5.6.13, 6.4.3 08.01.2019 SB2018110613
#VU16833 - Exposure of sensitive information to an unauthorized actor
CVE-2018-17245
CWE-200 Low
No
No
5.6.13, 6.4.3 08.01.2019 SB2018110613
#VU16603 - Command injection
CVE-2018-17246
CWE-77 Medium
No
No
5.6.13, 6.4.3 19.12.2018 SB2018110613
#VU11470 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-3819
CWE-601 Low
No
No
- 03.04.2018 SB2018013026
#VU11469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3821
CWE-79 Low
No
No
- 03.04.2018 SB2018013026
#VU11468 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3818
CWE-79 Low
No
No
- 02.04.2018 SB2018013026


Showing elements 181 - 200 out of 189