Known vulnerabilities in Kibana - page 9

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7017
CWE-79 Low
No
No
7.8.1 28.07.2020 SB2020072815
SB2021072122
SB2021072765
#VU32871 - Improper input validation
CVE-2020-7016
CWE-20 Medium
No
No
6.8.11, 7.8.1 28.07.2020 SB2020072815
#VU30271 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7013
CWE-94 High
No
No
7.7.0 03.06.2020 SB2020060342
#VU30272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7015
CWE-79 Low
No
No
7.7.1 03.06.2020 SB2020060343
SB2020090889
#VU23689 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7621
CWE-79 Low
No
No
6.8.6, 7.5.1 19.12.2019 SB2019121906
#VU35199 - Incorrect Permission Assignment for Critical Resource
CVE-2019-7618
CWE-732 Medium
No
No
- 01.10.2019 SB2019100135
#VU21418 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3830
CWE-79 Low
No
No
5.6.12, 6.4.1 30.09.2019 SB2018091904
#VU20032 - Server-Side Request Forgery (SSRF)
CVE-2019-7616
CWE-918 Low
No
No
6.8.2, 7.2.1 09.08.2019 SB2019080912
#VU18085 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-7609
CWE-94 Medium
Available
Exploited
5.6.15, 6.6.1 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU18084 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7608
CWE-79 Medium
No
No
5.6.15, 6.6.1 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU18083 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-7610
CWE-94 High
No
No
5.6.15, 6.6.1 27.03.2019 SB2019032702
SB2019022505
SB2019100107
#VU31340 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-3820
CWE-79 Low
No
No
6.1.3 30.03.2018 SB2018033016
#VU37771 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11481
CWE-79 Low
No
No
- 08.12.2017 SB2017120818
#VU37772 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-11482
CWE-601 Low
No
No
- 08.12.2017 SB2017120818
#VU38184 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11479
CWE-79 Low
No
No
- 29.09.2017 SB2017092908
#VU31414 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9056
CWE-79 Low
No
No
4.2.1 17.06.2017 SB2017061706
#VU31415 - Improper Authorization
CVE-2016-1000219
CWE-285 Medium
No
No
4.5.4 17.06.2017 SB2017061707
#VU31416 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1000220
CWE-79 Low
No
No
4.5.4 17.06.2017 SB2017061707
#VU38852 - Permissions, Privileges, and Access Controls
CVE-2016-10364
CWE-264 Medium
No
No
- 17.06.2017 SB2017061709
#VU38853 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10366
CWE-79 Low
No
No
- 17.06.2017 SB2017061710


Showing elements 161 - 180 out of 189