Filters

Versions

8.0.0
13
7.0.0
12
6.0.0
9
5.0.0
5
5.3.0
4
4.1.0
3
4.5.0
3
5.4.0
3
5.6.0
3
4.0.0
2
4.2.0
2
4.6.0
2
5.0.1
2
5.1.1
2
5.2.0
2
5.3.1
2
5.3.2
2
5.4.2
2
5.6.1
2
5.6.2
2
5.6.3
2
5.6.4
2
6.0.0-alpha1
2
6.0.0-alpha2
2
6.0.0-beta1
2
6.0.0-beta2
2
6.0.0-rc1
2
6.0.0-rc2
2
7.7.0
2
7.9.0
2
8.7.0
2
4.0.1
1
4.0.2
1
4.1.2
1
4.2.0-beta1
1
4.2.0-beta2
1
4.3.0
1
4.3.1
1
4.3.2
1
4.3.3
1
4.4.0
1
4.4.1
1
4.4.2
1
4.5.1
1
4.5.2
1
4.5.3
1
4.5.4
1
4.6.1
1
4.6.2
1
4.7
1
5.0.2
1
5.1.2
1
5.2.1
1
5.2.2
1
5.3.3
1
5.4.1
1
5.4.3
1
5.5.0
1
5.5.1
1
5.5.2
1
5.5.3
1
5.6.12
1
6.1.2
1
6.4.1
1
6.4.2
1
6.7.0
1
6.8.8
1
7.10.2
1
7.13.0
1
7.14.0
1
7.15.0
1
7.17.0
1
7.2.1
1
7.3.0
1
7.3.1
1
7.3.2
1
7.5.1
1
7.6.2
1
7.8.0
1
8.10.0
1
8.15.0
1
8.2.3
1
8.6.3
1

Elastic KibanaA deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse…

critical
9.9
First published (updated )
CVE-2024-37288

Elastic KibanaKibana arbitrary code execution via prototype pollution

critical
9.1
First published (updated )
CVE-2024-37287

Elastic KibanaA high-privileged user, allowed to create custom osquery packs 17 could affect the availability of K…

medium
4.9
First published (updated )
CVE-2024-23443

Elastic KibanaKibana open redirect issue

medium
6.1
First published (updated )
CVE-2024-23442

Elastic KibanaKibana Broken Access Control issue

medium
4.3
First published (updated )
CVE-2024-37279

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Elastic KibanaKibana Broken Access Control issue

medium
6.5
EPSS
0.05%
First published (updated )
CVE-2024-23446

Elastic KibanaKibana Insertion of Sensitive Information into Log File

high
8
First published (updated )
CVE-2023-46675

Elastic KibanaKibana Insertion of Sensitive Information into Log File

high
8
First published (updated )
CVE-2023-46671

Elastic KibanaKibana Reporting vulnerabilities

high
8.8
First published (updated )
CVE-2021-22142

Elastic KibanaKibana path traversal issue

medium
4.3
First published (updated )
CVE-2021-22151

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Elastic KibanaKibana code execution issue

high
7.2
First published (updated )
CVE-2021-22150

Elastic KibanaKibana Insertion of Sensitive Information into Log File

critical
9
First published (updated )
CVE-2023-31422

Elastic KibanaCode Injection

high
8.8
First published (updated )
CVE-2023-31414

Elastic KibanaCode Injection

high
8.8
First published (updated )
CVE-2023-31415

Elastic KibanaAn open redirect issue was discovered in Kibana that could lead to a user being redirected to an arb…

medium
6.1
First published (updated )
CVE-2022-38779

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Elastic KibanaInput Validation

medium
6.5
First published (updated )
CVE-2022-38778

Elastic KibanaXSS

medium
5.4
First published (updated )
CVE-2021-37936

Elastic KibanaAn open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user vis…

medium
6.1
First published (updated )
CVE-2021-22141

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2022-23713

Elastic KibanaInfoleak

medium
5.3
First published (updated )
CVE-2022-23711

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2022-23710

Elastic KibanaA flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify a…

medium
4.3
First published (updated )
CVE-2022-23709

Elastic KibanaXSS

medium
5.4
First published (updated )
CVE-2022-23707

Elastic KibanaInfoleak

medium
4
First published (updated )
CVE-2021-37939

Elastic KibanaPath Traversal

medium
4.3
First published (updated )
CVE-2021-37938

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Elastic KibanaKibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook act…

medium
6.5
First published (updated )
CVE-2021-22139

Elastic KibanaIn Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the x…

low
3.6
First published (updated )
CVE-2021-22136

redhat/elasticsearch-operator-containerThe elasticsearch-operator does not validate the namespace where kibana logging resource is created …

medium
6.1
First published (updated )
CVE-2020-27816

Elastic KibanaCode Injection

high
8.8
First published (updated )
CVE-2020-7012

redhat/kibanaXSS

medium
5.4
First published (updated )
CVE-2020-7015

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

redhat/kibanaCode Injection

high
7.2
First published (updated )
CVE-2020-7013

Redhat Openshift Container PlatformIt was discovered that kibana could be opened in an iframe, which made it possible to intercept and …

medium
4.3
First published (updated )
CVE-2020-10743

Elastic KibanaXSS

medium
5.4
First published (updated )
CVE-2019-7621

Elastic KibanaPath Traversal

medium
6.5
First published (updated )
CVE-2019-7618

Elastic KibanaSSRF

medium
4.9
First published (updated )
CVE-2019-7616

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

redhat/kibanaCommand Injection, Code Injection

critical
9.3
First published (updated )
CVE-2019-7610

redhat/kibanaXSS

medium
6.1
First published (updated )
CVE-2019-7608

Elastic KibanaKibana Arbitrary Code Execution

critical
10
Exploited
First published (updated )
CVE-2019-7609

Elastic KibanaKibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorizatio…

critical
9.8
First published (updated )
CVE-2018-17245

Elastic KibanaKibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plug…

critical
9.8
First published (updated )
CVE-2018-17246

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2018-3830

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2018-3820

Elastic KibanaThe fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions befo…

medium
6.1
First published (updated )
CVE-2018-3819

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2018-3821

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2018-3818

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Elastic KibanaThe Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions …

medium
6.1
First published (updated )
CVE-2017-11482

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2017-11481

Elastic KibanaXSS

medium
6.1
First published (updated )
CVE-2017-11479

Elastic KibanaInfoleak

medium
6.5
First published (updated )
CVE-2017-8443

Elastic KibanaWith X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to …

medium
6.5
First published (updated )
CVE-2016-10364

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203