Known vulnerabilities in Kibana - page 7

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 152 known vulnerabilities: 2 critical, 8 high, 40 medium, 102 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51711 - Insufficient Session Expiration
CVE-2021-22136
CWE-613 Low
No
No
6.8.15, 7.12.0 25.03.2021 SB2021032503
#VU50605 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26296
CWE-79 Medium
No
No
6.8.14, 7.10.2 11.02.2021 SB2021021102
SB2021021103
#VU32872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7017
CWE-79 Low
No
No
7.8.1 28.07.2020 SB2020072815
SB2021072122
SB2021072765
#VU32871 - Improper input validation
CVE-2020-7016
CWE-20 Medium
No
No
6.8.11, 7.8.1 28.07.2020 SB2020072815
#VU30271 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7013
CWE-94 High
No
No
7.7.0 03.06.2020 SB2020060342
#VU30272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7015
CWE-79 Low
No
No
7.7.1 03.06.2020 SB2020060343
SB2020090889
#VU23689 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7621
CWE-79 Low
No
No
6.8.6, 7.5.1 19.12.2019 SB2019121906
#VU35199 - Incorrect Permission Assignment for Critical Resource
CVE-2019-7618
CWE-732 Medium
No
No
- 01.10.2019 SB2019100135
#VU21418 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3830
CWE-79 Low
No
No
5.6.12, 6.4.1 30.09.2019 SB2018091904
#VU20032 - Server-Side Request Forgery (SSRF)
CVE-2019-7616
CWE-918 Low
No
No
6.8.2, 7.2.1 09.08.2019 SB2019080912
#VU18085 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-7609
CWE-94 Medium
Available
Exploited
5.6.15, 6.6.1 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU18084 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7608
CWE-79 Medium
No
No
5.6.15, 6.6.1 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU18083 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-7610
CWE-94 High
No
No
5.6.15, 6.6.1 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU16834 - Exposure of sensitive information to an unauthorized actor
CVE-2018-17244
CWE-200 Low
No
No
5.6.13, 6.4.3 08.01.2019 SB2018110613
#VU16833 - Exposure of sensitive information to an unauthorized actor
CVE-2018-17245
CWE-200 Low
No
No
5.6.13, 6.4.3 08.01.2019 SB2018110613
#VU16603 - Command injection
CVE-2018-17246
CWE-77 Medium
No
No
5.6.13, 6.4.3 19.12.2018 SB2018110613
#VU11470 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-3819
CWE-601 Low
No
No
- 03.04.2018 SB2018013026
#VU11469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3821
CWE-79 Low
No
No
- 03.04.2018 SB2018013026
#VU11468 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3818
CWE-79 Low
No
No
- 02.04.2018 SB2018013026
#VU31340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3820
CWE-79 Low
No
No
6.1.3 30.03.2018 SB2018033016


Showing elements 121 - 140 out of 152