Known vulnerabilities in Kibana - page 8

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 152
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 152 known vulnerabilities: 2 critical, 8 high, 40 medium, 102 low Critical High Medium Low

Vulnerabilities (152)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU37771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11481
CWE-79 Low
No
No
- 08.12.2017 SB2017120818
#VU37772 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-11482
CWE-601 Low
No
No
- 08.12.2017 SB2017120818
#VU38184 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11479
CWE-79 Low
No
No
- 29.09.2017 SB2017092908
#VU31414 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9056
CWE-79 Low
No
No
4.2.1 17.06.2017 SB2017061706
#VU31415 - Improper Authorization
CVE-2016-1000219
CWE-285 Medium
No
No
4.5.4 17.06.2017 SB2017061707
#VU31416 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1000220
CWE-79 Low
No
No
4.5.4 17.06.2017 SB2017061707
#VU38852 - Permissions, Privileges, and Access Controls
CVE-2016-10364
CWE-264 Medium
No
No
- 17.06.2017 SB2017061709
#VU38853 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10366
CWE-79 Low
No
No
- 17.06.2017 SB2017061710
#VU38921 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8439
CWE-79 Low
No
No
- 05.06.2017 SB2017060507
#VU38922 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8440
CWE-79 Low
No
No
- 05.06.2017 SB2017060507
#VU40584 - Cross-Site Request Forgery (CSRF)
CVE-2015-8131
CWE-352 Medium
No
No
- 07.12.2015 SB2015120703
#VU40719 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-4093
CWE-79 Low
No
No
4.0.3 15.06.2015 SB2015061512


Showing elements 141 - 160 out of 152