KI
Product
Kibana
On CISA KEVExploited in the wild
203
CVEs
1
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 8High 45Medium 145Low 3
Watch
Add Kibana to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-37939 | 2.7 | Nov 18 | It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from… Affected: 7.8.0 before 7.15.2 |
| CVE-2015-8131 | – | Dec 7 | Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified… Affected: through 4.1.2; 4.2.0 |
| CVE-2015-4093 | – | Jun 15 | Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors Affected: 4.0.0; 4.0.1; 4.0.2 |