Known vulnerabilities in Kibana - page 7

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111905 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-25012
CWE-601 Low
No
No
7.17.29, 8.17.8, 8.18.3, 9.0.3 24.06.2025 SB2025062469
#VU110729 - Improper Authorization
CVE-2024-43706
CWE-285 Medium
No
No
8.12.1 10.06.2025 SB2025061075
#VU108739 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-25014
CWE-1321 Low
Available
No
8.17.6, 8.18.1, 9.0.1 06.05.2025 SB2025050668
#VU108118 - Unrestricted Upload of File with Dangerous Type
CVE-2024-11390
CWE-434 Low
No
No
7.17.24, 8.12.0 01.05.2025 SB2025050131
#VU108113 - Unrestricted Upload of File with Dangerous Type
CVE-2025-25016
CWE-434 Medium
No
No
7.17.19, 8.13.0 01.05.2025 SB2025050125
#VU107226 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-12556
CWE-1321 Medium
No
No
8.16.4, 8.17.2 08.04.2025 SB2025040884
#VU107225 - Resource exhaustion
CVE-2024-52974
CWE-400 Medium
No
No
7.17.23, 8.15.1 08.04.2025 SB2025040883
#VU105487 - Type confusion
CVE-2025-2135
CWE-843 High
Available
No
7.17.29, 8.17.8, 8.18.3, 9.0.3 10.03.2025 SB2025031111
SB2025031284
SB2025031301
and 8 more
#VU105351 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-25015
CWE-1321 Medium
No
No
8.16.5, 8.17.3 05.03.2025 SB2025030544
#VU103260 - Improper Access Control
CVE-2024-43707
CWE-284 Low
No
No
8.15.0 23.01.2025 SB2025012329
#VU103259 - Server-Side Request Forgery (SSRF)
CVE-2024-43710
CWE-918 Medium
No
No
8.15.0 23.01.2025 SB2025012329
#VU103258 - Resource Management Errors
CVE-2024-43708
CWE-399 Medium
No
No
7.17.23, 8.15.0 23.01.2025 SB2025012329
#VU103257 - Resource Management Errors
CVE-2024-52972
CWE-399 Medium
No
No
7.17.23, 8.15.0 23.01.2025 SB2025012329
#VU103107 - Allocation of Resources Without Limits or Throttling
CVE-2024-52973
CWE-770 Medium
No
No
7.17.23, 8.14.2 21.01.2025 SB2025012116
#VU96907 - Deserialization of Untrusted Data
CVE-2024-37285
CWE-502 High
No
No
8.15.1 06.09.2024 SB2024090615
#VU96906 - Deserialization of Untrusted Data
CVE-2024-37288
CWE-502 High
No
No
8.15.1 06.09.2024 SB2024090615
#VU95401 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-37287
CWE-1321 High
No
No
7.17.23, 8.14.3 06.08.2024 SB2024080624
#VU95111 - Improper input validation
CVE-2024-37281
CWE-20 Medium
No
No
7.17.23, 8.14.0 31.07.2024 SB20240731195
#VU73798 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26486
CWE-79 Low
No
No
7.17.10, 8.7.0 20.03.2023 SB2023032003
SB2023032004
SB2023051150
and 1 more
#VU73795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26487
CWE-79 Low
No
No
7.17.10, 8.7.0 20.03.2023 SB2023032003
SB2023032004
SB2023051150
and 1 more


Showing elements 121 - 140 out of 189