Known vulnerabilities in Kiali

Vendor: Kiali
Software: Kiali
Software CPE: cpe:2.3:a:kiali:kiali:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kiali Kiali is affected by 7 known vulnerabilities: 3 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756
CWE-78 Medium
No
No
1.73.25, 2.4.11, 2.11.5, 2.17.2 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU119132 - Uncontrolled Recursion
CVE-2025-66031
CWE-674 Medium
No
No
1.73.25, 2.4.11, 2.11.5, 2.17.2 04.12.2025 SB2025120419
SB2025120930
SB20251210178
and 15 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.65.10 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217
CWE-319 Medium
No
No
1.65.10 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU71694 - Improper input validation
CVE-2022-3962
CWE-20 Low
No
No
- 31.01.2023 SB2023013110
SB2023013111
#VU27380 - Use of Hard-coded Cryptographic Key
CVE-2020-1764
CWE-321 High
Available
No
1.15.1 28.04.2020 SB2020042807
#VU27379 - Insufficient Session Expiration
CVE-2020-1762
CWE-613 High
No
No
1.15.1 28.04.2020 SB2020042807