Known vulnerabilities in Kibana - page 5

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 152 known vulnerabilities: 2 critical, 8 high, 40 medium, 102 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120210 - Improper Authorization
CVE-2025-68422
CWE-285 Low
No
No
8.19.7, 9.1.7, 9.2.1 19.12.2025 SB2025111256
#VU116635 - Insufficiently Protected Credentials
CVE-2025-37728
CWE-522 Medium
No
No
8.18.8, 8.19.5, 9.0.8, 9.1.5 06.10.2025 SB2025100655
#VU116634 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25009
CWE-79 Low
No
No
8.18.8, 8.19.5, 9.0.8, 9.1.5 06.10.2025 SB2025100655
#VU116633 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25018
CWE-79 Low
No
No
8.18.8, 8.19.5, 9.0.8, 9.1.5 06.10.2025 SB2025100655
#VU116632 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25017
CWE-79 Low
No
No
8.18.8, 8.19.4, 9.0.7, 9.1.4 06.10.2025 SB2025100654
#VU114575 - Improper Authorization
CVE-2025-25010
CWE-285 Medium
No
No
9.0.6, 9.1.3 30.08.2025 SB2025083006
#VU111905 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-25012
CWE-601 Low
No
No
7.17.29, 8.17.8, 8.18.3, 9.0.3 24.06.2025 SB2025062469
#VU110729 - Improper Authorization
CVE-2024-43706
CWE-285 Medium
No
No
8.12.1 10.06.2025 SB2025061075
#VU108739 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-25014
CWE-1321 Low
Available
No
8.17.6, 8.18.1, 9.0.1 06.05.2025 SB2025050668
#VU108118 - Unrestricted Upload of File with Dangerous Type
CVE-2024-11390
CWE-434 Low
No
No
7.17.24, 8.12.0 01.05.2025 SB2025050131
#VU108113 - Unrestricted Upload of File with Dangerous Type
CVE-2025-25016
CWE-434 Medium
No
No
7.17.19, 8.13.0 01.05.2025 SB2025050125
#VU107226 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-12556
CWE-1321 Medium
No
No
8.16.4, 8.17.2 08.04.2025 SB2025040884
#VU107225 - Resource exhaustion
CVE-2024-52974
CWE-400 Medium
No
No
7.17.23, 8.15.1 08.04.2025 SB2025040883
#VU105487 - Type confusion
CVE-2025-2135
CWE-843 High
Available
No
7.17.29, 8.17.8, 8.18.3, 9.0.3 10.03.2025 SB2025031111
SB2025031284
SB2025031301
and 8 more
#VU105351 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-25015
CWE-1321 Medium
No
No
8.16.5, 8.17.3 05.03.2025 SB2025030544
#VU103260 - Improper Access Control
CVE-2024-43707
CWE-284 Low
No
No
8.15.0 23.01.2025 SB2025012329
#VU103259 - Server-Side Request Forgery (SSRF)
CVE-2024-43710
CWE-918 Medium
No
No
8.15.0 23.01.2025 SB2025012329
#VU103258 - Resource Management Errors
CVE-2024-43708
CWE-399 Medium
No
No
7.17.23, 8.15.0 23.01.2025 SB2025012329
#VU103257 - Resource Management Errors
CVE-2024-52972
CWE-399 Medium
No
No
7.17.23, 8.15.0 23.01.2025 SB2025012329
#VU103107 - Allocation of Resources Without Limits or Throttling
CVE-2024-52973
CWE-770 Medium
No
No
7.17.23, 8.14.2 21.01.2025 SB2025012116


Showing elements 81 - 100 out of 152