KI
Product
Kibana
On CISA KEVExploited in the wild
203
CVEs
1
On KEV
10.0
Max CVSS
3
New 30D
Severity mix
Critical 8High 45Medium 145Low 3
Watch
Add Kibana to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49096 | 3.5 | Aug 13 | Uncaught Exception in Kibana Cases Leading to Denial of Service Affected: 8.0.0 through 8.19.19; 9.0.0 through 9.3.4; 9.4.0; 9.4.1 |
| CVE-2021-22136 | 3.5 | May 13 | In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected Affected: before 6.8.15; 7.0.0 before 7.12.0 |
| CVE-2021-37939 | 2.7 | Nov 18 | It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from… Affected: 7.8.0 before 7.15.2 |
Showing 3