Advisories · Technology
Elastic Kibana.
Every CVE that names Elastic Kibana among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 7.3 High
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion
- Elastic Kibana
- Path traversal
- CVSS 6.5 Medium
Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure
- Elastic Kibana
- Information disclosure
- CVSS 4.3 Medium
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Missing Authorization in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 8.8 High
Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to denial of service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
- Elastic Kibana
- Broken access control
- CVSS 6.3 Medium
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data
- Elastic Kibana
- Broken access control
- CVSS 7.3 High
Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation
- Elastic Kibana
- CWE-441
- CVSS 8.1 High
Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Incorrect Authorization in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Incorrect Authorization in Kibana Leading to Denial of Service
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Improper Control of Generation of Code in Kibana Leading to Privilege Escalation
- Elastic Kibana
- Code injection
- CVSS 8.1 High
Incorrect Authorization in Kibana Leading to Privilege Escalation
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.3 Medium
Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure
- Elastic Kibana
- CWE-204
- CVSS 6.3 Medium
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion
- Elastic Kibana
- Path traversal
- CVSS 7.3 High
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
- Elastic Kibana
- Path traversal
- CVSS 6.5 Medium
Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources
- Elastic Kibana
- Path traversal
- CVSS 5.4 Medium
Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data
- Elastic Kibana
- Broken access control
- CVSS 5.5 Medium
Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data Exposure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure
- Elastic Kibana
- Other injection
- CVSS 4.3 Medium
Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation
- Elastic Kibana
- Broken access control
- CVSS 7.3 High
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
- Elastic Kibana
- Path traversal
- CVSS 4.2 Medium
Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Missing Authorization in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure
- Elastic Kibana
- Privilege escalation
- CVSS 4.3 Medium
Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring
- Elastic Kibana
- Broken access control
- CVSS 5.4 Medium
Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service
- Elastic Kibana
- CWE-409
- CVSS 6.5 Medium
Uncaught Exception in Kibana Leading to Denial of Service
- Elastic Kibana
- CWE-248
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 8.3 High
Incorrect Authorization in Kibana Leading to Privilege Escalation
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.2 Medium
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Uncaught Exception in Kibana Cases Leading to Denial of Service
- Elastic Kibana
- CWE-248
- CVSS 7.1 High
Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys
- Elastic Kibana
- Information disclosure
- CVSS 6.5 Medium
Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys
- Elastic Kibana
- Privilege escalation
- CVSS 7.1 High
Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation
- Elastic Kibana
- Broken access control
- CVSS 7.1 High
Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models
- Elastic Kibana
- Broken access control
- CVSS 7.1 High
Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.3 Medium
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Missing Authorization in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Uncaught Exception in Kibana Leading to Denial of Service
- Elastic Kibana
- CWE-248
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 7.3 High
Cross-Site Request Forgery in Kibana Leading to Privilege Escalation
- Elastic Kibana
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.8 Medium
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts
- Elastic Kibana
- Broken access control
- CVSS 8.1 High
Missing Authorization in Kibana Leading to Unauthorized Execution of Host Response Actions
- Elastic Kibana
- Broken access control