Known vulnerabilities in Kibana - page 5
Vendor:
Elastic Stack
Software:
Kibana
Software CPE:
cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Website:
https://www.elastic.co/
Total vulnerabilities:
189
Public exploits:
5
Known exploited (KEV):
3
Breakdown by Severity Chart
8.19.23
9.4.8
9.5.5
9.4.7
9.5.4
9.5.3
8.19.22
9.4.6
8.19.21
9.5.2
9.5.1
9.4.5
8.19.20
9.5.0
9.4.4
9.3.8
8.19.19
9.4.3
9.3.7
8.19.18
9.3.6
8.19.17
9.4.2
8.19.16
9.3.5
9.4.1
9.4.0
8.19.15
9.3.4
9.2.8
8.19.14
9.3.3
9.3.2
9.2.7
8.19.13
9.3.1
9.2.6
8.19.12
9.3.0
9.2.5
8.19.11
9.2.4
9.1.10
8.19.10
9.2.3
9.1.9
8.19.9
9.2.2
9.1.8
8.19.8
8.19.7
9.2.1
9.1.7
9.2.0
9.1.6
8.19.6
9.1.5
9.0.8
8.19.5
8.18.8
9.1.4
8.19.4
9.0.7
8.18.7
8.19.3
8.18.6
9.1.3
9.0.6
9.1.2
8.19.2
8.17.10
9.0.5
8.18.5
9.1.1
8.19.1
9.1.0
8.19.0
9.0.4
8.18.4
8.17.9
9.0.3
8.18.3
8.17.8
7.17.29
9.0.2
8.17.7
8.18.2
9.0.1
8.18.1
8.17.6
8.17.5
9.0.0
8.18.0
8.17.4
8.16.6
8.17.3
8.16.5
7.17.28
8.16.4
8.17.2
8.17.1
8.16.3
7.17.27
8.16.2
8.17.0
7.17.26
8.15.5
8.16.1
8.16.0
8.15.4
7.17.25
8.15.3
8.15.2
7.17.24
8.15.1
8.15.0
7.17.23
8.14.3
8.14.2
7.17.22
8.14.1
8.14.0
8.13.4
8.13.3
7.17.21
7.17.20
8.13.2
8.13.1
8.13.0
7.17.19
8.12.2
8.12.1
7.17.18
7.17.17
8.12.0
8.11.4
8.11.3
7.17.16
8.11.2
8.11.1
7.17.15
8.11.0
8.10.4
8.10.3
7.17.14
8.10.2
8.10.1
8.10.0
8.9.2
7.17.13
8.9.1
8.9.0
7.17.12
8.8.2
7.17.11
8.8.1
8.8.0
8.7.1
7.17.10
8.7.0
8.6.2
7.17.9
8.6.1
8.6.0
8.5.3
7.17.8
8.5.2
8.5.1
8.5.0
7.17.7
8.4.3
8.4.2
8.4.1
8.4.0
7.17.6
8.3.3
8.3.2
8.3.1
8.3.0
7.17.5
8.2.3
8.2.2
8.2.1
7.17.4
8.2.0
8.1.3
7.17.3
8.1.2
7.17.2
8.1.1
7.3.6
7.3.5
7.3.4
7.3.3
8.1.0
8.0.1
7.17.1
8.0.0
7.17.0
7.16.3
6.8.23
7.16.2
6.8.22
7.16.1
6.8.21
7.16.0
7.15.2
7.15.1
6.8.20
7.15.0
6.8.19
7.14.2
7.14.1
6.8.18
7.14.0
7.13.4
6.8.17
7.13.3
7.13.2
7.13.1
6.8.16
7.13.0
7.12.1
7.12.0
6.8.15
7.11.2
7.11.1
6.8.14
7.11.0
7.10.2
7.10.1
7.10.0
7.9.3
6.8.13
7.9.2
7.9.1
6.8.12
7.9.0
6.8.11
7.8.1
7.8.0
6.8.10
7.7.1
6.8.9
7.7.0
6.8.8
7.6.2
6.8.7
7.6.1
7.6.0
7.5.2
7.5.1
6.8.6
7.5.0
6.8.5
7.4.2
6.8.4
7.4.1
7.4.0
7.3.2
6.8.3
7.3.1
7.3.0
7.2.1
7.2.0
7.1.1
7.1.0
7.0.1
7.0.0
6.8.2
6.8.1
6.8.0
6.7.2
6.7.1
4.3.0
4.2.2
4.2.1
4.2.0
4.1.11
4.1.10
4.1.9
4.1.8
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
3.1.3
3.1.2
3.1.1
3.1.0
3.0.1
3.0.0
6.7.0
6.6.2
6.6.1
6.6.0
6.5.4
5.6.16
5.6.15
4.6.6
4.6.5
4.6.4
4.6.3
4.6.2
4.6.1
4.6.0
4.5.4
4.5.3
4.5.2
4.5.1
4.5.0
4.4.2
4.4.1
4.4.0
4.3.3
4.3.2
4.3.1
4.6
4.5
4.4
4.3
4.2
4.1
4.0
5.0.0
5.0.1
5.0.2
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.3.2
5.3.3
5.4.0
5.4.1
5.4.2
5.4.3
5.5.0
5.5.1
5.5.2
5.5.3
5.6.7
5.6.8
5.6.9
5.6.10
5.6.11
5.6.12
5.6.13
5.6.14
6.5.3
6.5.2
6.5.1
6.5.0
6.4.3
6.4.2
6.4.1
6.4.0
6.3.2
6.3.1
6.3.0
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.4
6.1.3
6.0.1
6.1.2
5.6.6
6.1.1
6.1.0
6.0.0
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
Vulnerabilities (189)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU136675 - Improper Output Neutralization for Logs CVE-2026-49091 |
CWE-117 | Medium | 7.17.15, 8.11.1 | 02.07.2026 |
SB2026070213 |
||
| #VU132766 - Resource exhaustion CVE-2026-33464 |
CWE-400 | Low | 8.19.16, 9.3.5, 9.4.1 | 29.05.2026 |
SB2026052933 |
||
| #VU132765 - Server-Side Request Forgery (SSRF) CVE-2026-42398 |
CWE-918 | Low | 9.2.8, 9.3.2 | 29.05.2026 |
SB2026040923 |
||
| #VU132764 - Resource exhaustion CVE-2026-49094 |
CWE-400 | Low | 8.19.16 | 29.05.2026 |
SB2026052933 |
||
| #VU132763 - Resource exhaustion CVE-2026-42399 |
CWE-400 | Low | 8.19.16, 9.3.5 | 29.05.2026 |
SB2026052933 |
||
| #VU132762 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-33462 |
CWE-22 | Low | 8.19.16, 9.3.5 | 29.05.2026 |
SB2026052933 |
||
| #VU132761 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-42401 |
CWE-79 | Low | 8.19.16, 9.3.5 | 29.05.2026 |
SB2026052933 |
||
| #VU132760 - Resource exhaustion CVE-2026-42400 |
CWE-400 | Low | 8.19.16, 9.3.5, 9.4.2 | 29.05.2026 |
SB2026052933 |
||
| #VU132759 - Server-Side Request Forgery (SSRF) CVE-2026-49093 |
CWE-918 | Low | 9.3.3 | 29.05.2026 |
SB2026052934 |
||
| #VU132758 - Operation on a Resource after Expiration or Release CVE-2026-33463 |
CWE-672 | Medium | 8.19.16, 9.3.5 | 29.05.2026 |
SB2026052933 |
||
| #VU132757 - Improper input validation CVE-2026-49095 |
CWE-20 | Low | 8.19.16, 9.3.5, 9.4.2 | 29.05.2026 |
SB2026052933 |
||
| #VU125551 - Server-Side Request Forgery (SSRF) CVE-2026-33458 |
CWE-918 | Medium | 9.3.3 | 09.04.2026 |
SB2026040923 |
||
| #VU125550 - Resource exhaustion CVE-2026-33459 |
CWE-400 | Medium | 8.19.14, 9.2.8, 9.3.3 | 09.04.2026 |
SB2026040923 |
||
| #VU125549 - Incorrect Authorization CVE-2026-33460 |
CWE-863 | Low | 8.19.14, 9.2.8, 9.3.3 | 09.04.2026 |
SB2026040923 |
||
| #VU125548 - Incorrect Authorization CVE-2026-33461 |
CWE-863 | Low | 8.19.14, 9.2.8, 9.3.3 | 09.04.2026 |
SB2026040923 |
||
| #VU125547 - Execution with Unnecessary Privileges CVE-2026-4498 |
CWE-250 | Low | 8.19.14, 9.2.8, 9.3.3 | 09.04.2026 |
SB2026040923 |
||
| #VU124151 - Resource exhaustion CVE-2026-26940 |
CWE-400 | Medium | 8.19.13, 9.2.7, 9.3.2 | 19.03.2026 |
SB2026031962 |
||
| #VU124150 - Missing Authorization CVE-2026-26939 |
CWE-862 | Low | 8.19.12, 9.2.6, 9.3.1 | 19.03.2026 |
SB2026031961 |
||
| #VU123317 - Improper input validation CVE-2026-26934 |
CWE-20 | Medium | 8.19.12, 9.2.6, 9.3.1 | 27.02.2026 |
SB2026022720 |
||
| #VU123316 - Improper input validation CVE-2026-26935 |
CWE-20 | Medium | 8.19.12, 9.2.6, 9.3.1 | 27.02.2026 |
SB2026022720 |
Showing elements 81 - 100 out of 189