Known vulnerabilities in Kibana - page 6

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123319 - Inefficient Regular Expression Complexity
CVE-2026-26936
CWE-1333 Low
No
No
8.19.11, 9.2.5 27.02.2026 SB2026022719
#VU123318 - Resource exhaustion
CVE-2026-26937
CWE-400 Medium
No
No
8.19.11, 9.2.5 27.02.2026 SB2026022719
#VU123315 - Server-Side Request Forgery (SSRF)
CVE-2026-26938
CWE-918 Medium
No
No
9.3.1 27.02.2026 SB2026022720
#VU121291 - Resource exhaustion
CVE-2026-0543
CWE-400 Medium
No
No
8.19.10, 9.1.10, 9.2.4 13.01.2026 SB20260113103
#VU121290 - Server-Side Request Forgery (SSRF)
CVE-2026-0532
CWE-918 High
No
No
8.19.10, 9.1.10, 9.2.4 13.01.2026 SB20260113103
#VU121288 - Resource exhaustion
CVE-2026-0531
CWE-400 Medium
No
No
8.19.10, 9.1.10, 9.2.4 13.01.2026 SB20260113103
#VU121286 - Resource exhaustion
CVE-2026-0530
CWE-400 Medium
No
No
8.19.10, 9.1.10, 9.2.4 13.01.2026 SB20260113103
#VU120214 - Resource exhaustion
CVE-2025-68389
CWE-400 Medium
No
No
8.19.9, 9.1.9, 9.2.3 19.12.2025 SB2025121929
#VU120213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68387
CWE-79 Low
No
No
8.19.9, 9.1.9, 9.2.3 19.12.2025 SB2025121929
#VU120212 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-68385
CWE-79 Low
No
No
8.19.9, 9.1.9, 9.2.3 19.12.2025 SB2025121929
#VU120211 - Improper Authorization
CVE-2025-68386
CWE-285 Low
No
No
8.19.8, 9.1.8, 9.2.2 19.12.2025 SB2025121525
#VU120210 - Improper Authorization
CVE-2025-68422
CWE-285 Low
No
No
8.19.7, 9.1.7, 9.2.1 19.12.2025 SB2025111256
#VU119963 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-37732
CWE-79 Low
No
No
8.19.8, 9.1.8, 9.2.2 15.12.2025 SB2025121525
#VU118377 - Server-Side Request Forgery (SSRF)
CVE-2025-37734
CWE-918 Medium
No
No
8.19.7, 9.1.7, 9.2.1 12.11.2025 SB2025111256
#VU118376 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59840
CWE-79 Low
No
No
8.19.7, 9.1.7, 9.2.1 12.11.2025 SB2025111256
SB2025111379
SB2026061725
#VU116635 - Insufficiently Protected Credentials
CVE-2025-37728
CWE-522 Medium
No
No
8.18.8, 8.19.5, 9.0.8, 9.1.5 06.10.2025 SB2025100655
#VU116634 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25009
CWE-79 Low
No
No
8.18.8, 8.19.5, 9.0.8, 9.1.5 06.10.2025 SB2025100655
#VU116633 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25018
CWE-79 Low
No
No
8.18.8, 8.19.5, 9.0.8, 9.1.5 06.10.2025 SB2025100655
#VU116632 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-25017
CWE-79 Low
No
No
8.18.8, 8.19.4, 9.0.7, 9.1.4 06.10.2025 SB2025100654
#VU114575 - Improper Authorization
CVE-2025-25010
CWE-285 Medium
No
No
9.0.6, 9.1.3 30.08.2025 SB2025083006


Showing elements 101 - 120 out of 189