Known vulnerabilities in Kibana - page 4
Vendor:
Elastic Stack
Software:
Kibana
Software CPE:
cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Website:
https://www.elastic.co/
Total vulnerabilities:
152
Public exploits:
5
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.5.2
9.5.1
9.4.5
8.19.20
9.5.0
9.4.4
9.3.8
8.19.19
9.4.3
9.3.7
8.19.18
9.3.6
8.19.17
9.4.2
8.19.16
9.3.5
9.4.1
9.4.0
8.19.15
9.3.4
9.2.8
8.19.14
9.3.3
9.3.2
9.2.7
8.19.13
9.3.1
9.2.6
8.19.12
9.3.0
9.2.5
8.19.11
9.2.4
9.1.10
8.19.10
9.2.3
9.1.9
8.19.9
9.2.2
9.1.8
8.19.8
8.19.7
9.2.1
9.1.7
9.2.0
9.1.6
8.19.6
9.1.5
9.0.8
8.19.5
8.18.8
9.1.4
8.19.4
9.0.7
8.18.7
8.19.3
8.18.6
9.1.3
9.0.6
9.1.2
8.19.2
8.17.10
9.0.5
8.18.5
9.1.1
8.19.1
9.1.0
8.19.0
9.0.4
8.18.4
8.17.9
9.0.3
8.18.3
8.17.8
7.17.29
9.0.2
8.17.7
8.18.2
9.0.1
8.18.1
8.17.6
8.17.5
9.0.0
8.18.0
8.17.4
8.16.6
8.17.3
8.16.5
7.17.28
8.16.4
8.17.2
8.17.1
8.16.3
7.17.27
8.16.2
8.17.0
7.17.26
8.15.5
8.16.1
8.16.0
8.15.4
7.17.25
8.15.3
8.15.2
7.17.24
8.15.1
8.15.0
7.17.23
8.14.3
8.14.2
7.17.22
8.14.1
8.14.0
8.13.4
8.13.3
7.17.21
7.17.20
8.13.2
8.13.1
8.13.0
7.17.19
8.12.2
8.12.1
7.17.18
7.17.17
8.12.0
8.11.4
8.11.3
7.17.16
8.11.2
8.11.1
7.17.15
8.11.0
8.10.4
8.10.3
7.17.14
8.10.2
8.10.1
8.10.0
8.9.2
7.17.13
8.9.1
8.9.0
7.17.12
8.8.2
7.17.11
8.8.1
8.8.0
8.7.1
7.17.10
8.7.0
8.6.2
7.17.9
8.6.1
8.6.0
8.5.3
7.17.8
8.5.2
8.5.1
8.5.0
7.17.7
8.4.3
8.4.2
8.4.1
8.4.0
7.17.6
8.3.3
8.3.2
8.3.1
8.3.0
7.17.5
8.2.3
8.2.2
8.2.1
7.17.4
8.2.0
8.1.3
7.17.3
8.1.2
7.17.2
8.1.1
7.3.6
7.3.5
7.3.4
7.3.3
8.1.0
8.0.1
7.17.1
8.0.0
7.17.0
7.16.3
6.8.23
7.16.2
6.8.22
7.16.1
6.8.21
7.16.0
7.15.2
7.15.1
6.8.20
7.15.0
6.8.19
7.14.2
7.14.1
6.8.18
7.14.0
7.13.4
6.8.17
7.13.3
7.13.2
7.13.1
6.8.16
7.13.0
7.12.1
7.12.0
6.8.15
7.11.2
7.11.1
6.8.14
7.11.0
7.10.2
7.10.1
7.10.0
7.9.3
6.8.13
7.9.2
7.9.1
6.8.12
7.9.0
6.8.11
7.8.1
7.8.0
6.8.10
7.7.1
6.8.9
7.7.0
6.8.8
7.6.2
6.8.7
7.6.1
7.6.0
7.5.2
7.5.1
6.8.6
7.5.0
6.8.5
7.4.2
6.8.4
7.4.1
7.4.0
7.3.2
6.8.3
7.3.1
7.3.0
7.2.1
7.2.0
7.1.1
7.1.0
7.0.1
7.0.0
6.8.2
6.8.1
6.8.0
6.7.2
6.7.1
4.3.0
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
3.1.3
3.1.2
3.1.1
3.1.0
3.0.1
3.0.0
6.7.0
6.6.2
6.6.1
6.6.0
6.5.4
5.6.16
5.6.15
4.6.6
4.6.5
4.6.4
4.6.3
4.6.2
4.6.1
4.6.0
4.5.4
4.5.3
4.5.2
4.5.1
4.5.0
4.4.2
4.4.1
4.4.0
4.3.3
4.3.2
4.3.1
4.6
4.5
4.4
4.3
4.2
4.1
4.0
5.0.0
5.0.1
5.0.2
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.3.2
5.3.3
5.4.0
5.4.1
5.4.2
5.4.3
5.5.0
5.5.1
5.5.2
5.5.3
5.6.7
5.6.8
5.6.9
5.6.10
5.6.11
5.6.12
5.6.13
5.6.14
6.5.3
6.5.2
6.5.1
6.5.0
6.4.3
6.4.2
6.4.1
6.4.0
6.3.2
6.3.1
6.3.0
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.4
6.1.3
6.0.1
6.1.2
5.6.6
6.1.1
6.1.0
6.0.0
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
Vulnerabilities (152)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132765 - Server-Side Request Forgery (SSRF) CVE-2026-42398 |
CWE-918 | Low | 9.2.8, 9.3.2 | 29.05.2026 |
SB2026040923 |
||
| #VU125551 - Server-Side Request Forgery (SSRF) CVE-2026-33458 |
CWE-918 | Medium | 9.3.3 | 09.04.2026 |
SB2026040923 |
||
| #VU124151 - Resource exhaustion CVE-2026-26940 |
CWE-400 | Medium | 8.19.13, 9.2.7, 9.3.2 | 19.03.2026 |
SB2026031962 |
||
| #VU124150 - Missing Authorization CVE-2026-26939 |
CWE-862 | Low | 8.19.12, 9.2.6, 9.3.1 | 19.03.2026 |
SB2026031961 |
||
| #VU123319 - Inefficient Regular Expression Complexity CVE-2026-26936 |
CWE-1333 | Low | 8.19.11, 9.2.5 | 27.02.2026 |
SB2026022719 |
||
| #VU123318 - Resource exhaustion CVE-2026-26937 |
CWE-400 | Medium | 8.19.11, 9.2.5 | 27.02.2026 |
SB2026022719 |
||
| #VU123317 - Improper input validation CVE-2026-26934 |
CWE-20 | Medium | 8.19.12, 9.2.6, 9.3.1 | 27.02.2026 |
SB2026022720 |
||
| #VU123316 - Improper input validation CVE-2026-26935 |
CWE-20 | Medium | 8.19.12, 9.2.6, 9.3.1 | 27.02.2026 |
SB2026022720 |
||
| #VU123315 - Server-Side Request Forgery (SSRF) CVE-2026-26938 |
CWE-918 | Medium | 9.3.1 | 27.02.2026 |
SB2026022720 |
||
| #VU121291 - Resource exhaustion CVE-2026-0543 |
CWE-400 | Medium | 8.19.10, 9.1.10, 9.2.4 | 13.01.2026 |
SB20260113103 |
||
| #VU121290 - Server-Side Request Forgery (SSRF) CVE-2026-0532 |
CWE-918 | High | 8.19.10, 9.1.10, 9.2.4 | 13.01.2026 |
SB20260113103 |
||
| #VU121288 - Resource exhaustion CVE-2026-0531 |
CWE-400 | Medium | 8.19.10, 9.1.10, 9.2.4 | 13.01.2026 |
SB20260113103 |
||
| #VU121286 - Resource exhaustion CVE-2026-0530 |
CWE-400 | Medium | 8.19.10, 9.1.10, 9.2.4 | 13.01.2026 |
SB20260113103 |
||
| #VU120214 - Resource exhaustion CVE-2025-68389 |
CWE-400 | Medium | 8.19.9, 9.1.9, 9.2.3 | 19.12.2025 |
SB2025121929 |
||
| #VU120213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-68387 |
CWE-79 | Low | 8.19.9, 9.1.9, 9.2.3 | 19.12.2025 |
SB2025121929 |
||
| #VU120212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-68385 |
CWE-79 | Low | 8.19.9, 9.1.9, 9.2.3 | 19.12.2025 |
SB2025121929 |
||
| #VU120211 - Improper Authorization CVE-2025-68386 |
CWE-285 | Low | 8.19.8, 9.1.8, 9.2.2 | 19.12.2025 |
SB2025121525 |
||
| #VU119963 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-37732 |
CWE-79 | Low | 8.19.8, 9.1.8, 9.2.2 | 15.12.2025 |
SB2025121525 |
||
| #VU118377 - Server-Side Request Forgery (SSRF) CVE-2025-37734 |
CWE-918 | Medium | 8.19.7, 9.1.7, 9.2.1 | 12.11.2025 |
SB2025111256 |
||
| #VU118376 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-59840 |
CWE-79 | Low | 8.19.7, 9.1.7, 9.2.1 | 12.11.2025 |
SB2025111256 SB2025111379 SB2026061725 |
Showing elements 61 - 80 out of 152