Known vulnerabilities in Kibana - page 6

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 152 known vulnerabilities: 2 critical, 8 high, 40 medium, 102 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96907 - Deserialization of Untrusted Data
CVE-2024-37285
CWE-502 High
No
No
8.15.1 06.09.2024 SB2024090615
#VU96906 - Deserialization of Untrusted Data
CVE-2024-37288
CWE-502 High
No
No
8.15.1 06.09.2024 SB2024090615
#VU95401 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-37287
CWE-1321 High
No
No
7.17.23, 8.14.3 06.08.2024 SB2024080624
#VU95111 - Improper input validation
CVE-2024-37281
CWE-20 Medium
No
No
7.17.23, 8.14.0 31.07.2024 SB20240731195
#VU93628 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-23442
CWE-601 Low
No
No
7.17.22, 8.14.0 02.07.2024 SB2024061404
#VU92107 - Resource exhaustion
CVE-2024-23443
CWE-400 Low
No
No
7.17.22 14.06.2024 SB2024061404
#VU91262 - Improper Control of Interaction Frequency
CVE-2024-37279
CWE-799 Low
No
No
8.14.0 06.06.2024 SB2024060638
#VU87838 - Type confusion
CVE-2024-2887
CWE-843 High
Available
No
7.17.22, 8.14.0 26.03.2024 SB2024032701
SB2024032750
SB2024032751
and 8 more
#VU86228 - Permissions, Privileges, and Access Controls
CVE-2024-23446
CWE-264 Low
No
No
8.12.1 07.02.2024 SB2024020745
#VU84619 - Heap-based Buffer Overflow
CVE-2023-7024
CWE-122 Critical
No
Exploited
7.17.18, 8.12.1 21.12.2023 SB2023122103
SB2023122151
SB2023122201
and 10 more
#VU84384 - Information Exposure Through Log Files
CVE-2023-46675
CWE-532 Medium
No
No
7.17.16, 8.11.2 13.12.2023 SB2023121331
#VU83164 - Information Exposure Through Log Files
CVE-2023-46671
CWE-532 Low
No
No
7.17.15, 8.11.1 15.11.2023 SB2023111517
#VU80899 - Information Exposure Through Log Files
CVE-2023-31422
CWE-532 Low
No
No
8.10.1 19.09.2023 SB2023091975
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
7.17.14, 8.10.3 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU73798 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26486
CWE-79 Low
No
No
7.17.10, 8.7.0 20.03.2023 SB2023032003
SB2023032004
SB2023051150
and 1 more
#VU73795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26487
CWE-79 Low
No
No
7.17.10, 8.7.0 20.03.2023 SB2023032003
SB2023032004
SB2023051150
and 1 more
#VU62554 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23711
CWE-200 Low
No
No
7.17.3, 8.1.3 25.04.2022 SB2022042510
#VU53542 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-22141
CWE-601 Low
No
No
6.8.16, 7.13.0 25.05.2021 SB2021052542
#VU53541 - Security Features
CVE-2021-22142
CWE-254 Medium
No
No
7.13.0 25.05.2021 SB2021052542
#VU52691 - Improper input validation
CVE-2021-22139
CWE-20 Medium
No
No
7.12.1 28.04.2021 SB2021042810


Showing elements 101 - 120 out of 152