Known vulnerabilities in Kibana - page 8

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93628 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-23442
CWE-601 Low
No
No
7.17.22, 8.14.0 02.07.2024 SB2024061404
#VU92107 - Resource exhaustion
CVE-2024-23443
CWE-400 Low
No
No
7.17.22 14.06.2024 SB2024061404
#VU91262 - Improper Control of Interaction Frequency
CVE-2024-37279
CWE-799 Low
No
No
8.14.0 06.06.2024 SB2024060638
#VU87838 - Type confusion
CVE-2024-2887
CWE-843 High
Available
No
7.17.22, 8.14.0 26.03.2024 SB2024032701
SB2024032750
SB2024032751
and 8 more
#VU86228 - Permissions, Privileges, and Access Controls
CVE-2024-23446
CWE-264 Low
No
No
8.12.1 07.02.2024 SB2024020745
#VU84619 - Heap-based Buffer Overflow
CVE-2023-7024
CWE-122 Critical
No
Exploited
7.17.18, 8.12.1 21.12.2023 SB2023122103
SB2023122151
SB2023122201
and 10 more
#VU84384 - Information Exposure Through Log Files
CVE-2023-46675
CWE-532 Medium
No
No
7.17.16, 8.11.2 13.12.2023 SB2023121331
#VU83164 - Information Exposure Through Log Files
CVE-2023-46671
CWE-532 Low
No
No
7.17.15, 8.11.1 15.11.2023 SB2023111517
#VU80899 - Information Exposure Through Log Files
CVE-2023-31422
CWE-532 Low
No
No
8.10.1 19.09.2023 SB2023091975
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
7.17.14, 8.10.3 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU62554 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23711
CWE-200 Low
No
No
7.17.3, 8.1.3 25.04.2022 SB2022042510
#VU53542 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-22141
CWE-601 Low
No
No
6.8.16, 7.13.0 25.05.2021 SB2021052542
#VU53541 - Security Features
CVE-2021-22142
CWE-254 Medium
No
No
7.13.0 25.05.2021 SB2021052542
#VU52691 - Improper input validation
CVE-2021-22139
CWE-20 Medium
No
No
7.12.1 28.04.2021 SB2021042810
#VU51711 - Insufficient Session Expiration
CVE-2021-22136
CWE-613 Low
No
No
6.8.15, 7.12.0 25.03.2021 SB2021032503
#VU50605 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26296
CWE-79 Medium
No
No
6.8.14, 7.10.2 11.02.2021 SB2021021102
SB2021021103
#VU38921 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8439
CWE-79 Low
No
No
- 05.06.2017 SB2017060507
#VU38922 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-8440
CWE-79 Low
No
No
- 05.06.2017 SB2017060507
#VU40584 - Cross-Site Request Forgery (CSRF)
CVE-2015-8131
CWE-352 Medium
No
No
- 07.12.2015 SB2015120703
#VU40719 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-4093
CWE-79 Low
No
No
4.0.3 15.06.2015 SB2015061512


Showing elements 141 - 160 out of 189