Advisories · Technology
Elastic Kibana.
Every CVE that names Elastic Kibana among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions
- Elastic Kibana
- Broken access control
- CVSS 7.3 High
Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources
- Elastic Kibana
- Path traversal
- CVSS 7.1 High
Missing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data Modification
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 5.4 Medium
Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations
- Elastic Kibana
- Broken access control
- CVSS 7.7 High
Incorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event Data
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments
- Elastic Kibana
- Broken access control
- CVSS 7.7 High
Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials
- Elastic Kibana
- Information disclosure
- CVSS 7.6 High
Missing Authorization in Kibana Leading to Cross-User Information Disclosure and Data Tampering
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Missing Authorization in Kibana Leading to Privilege Escalation and Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.3 Medium
Missing Authorization in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.3 Medium
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Incorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Missing Authorization in Kibana Leading to Unauthorized Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 5.0 Medium
Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery
- Elastic Kibana
- Broken access control
- CVSS 6.3 Medium
Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 7.1 High
Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity Compromise
- Elastic Kibana
- Broken access control
- CVSS 5.4 Medium
Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.3 Medium
Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information Exposure
- Elastic Kibana
- Broken access control
- CVSS 8.0 High
Improper Output Neutralization for Logs in Kibana Leading to Log Injection
- Elastic Kibana
- CWE-116
- CVSS 4.4 Medium
Insertion of Sensitive Information into Log File in Kibana Leading to Information Disclosure
- Elastic Kibana
- Information disclosure
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 5.3 Medium
Incorrect Authorization in Kibana Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Improper Input Validation in Kibana Leading to Denial of Service
- Elastic Kibana
- CWE-20
- CVSS 6.3 Medium
Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access
- Elastic Kibana
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 7.2 High
Improper Input Validation in Kibana Fleet Leading to Privilege Escalation
- Elastic Kibana
- CWE-20
- CVSS 7.7 High
Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access
- Elastic Kibana
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.1 Medium
Improper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML Injection
- Elastic Kibana
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access
- Elastic Kibana
- CWE-672
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.6 Medium
Path Traversal in Kibana Leading to Unauthorized Deletion of User Accounts
- Elastic Kibana
- Path traversal
- CVSS 6.8 Medium
Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure
- Elastic Kibana
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.3 Medium
Incorrect Authorization in Kibana Fleet Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 7.7 High
Incorrect Authorization in Kibana Fleet Leading to Information Disclosure
- Elastic Kibana
- Broken access control
- CVSS 7.7 High
Execution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope
- Elastic Kibana
- Privilege escalation
- CVSS 6.5 Medium
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
- Elastic Kibana
- CWE-1284
- CVSS 6.5 Medium
Missing Authorization in Kibana Leading to Unauthorized Endpoint Response Action Configuration
- Elastic Kibana
- Broken access control
- CVSS 8.6 High
Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF)
- Elastic Kibana
- Code injection
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 4.9 Medium
Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Improper Input Validation in Kibana Leading to Denial of Service
- Elastic Kibana
- CWE-20
- CVSS 6.5 Medium
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service
- Elastic Kibana
- CWE-1284
- CVSS 8.6 High
External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector
- Elastic Kibana
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation
- Elastic Kibana
- CWE-20
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Fleet
- Elastic Kibana
- Denial of service
- CVSS 6.5 Medium
Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
- Elastic Kibana
- Denial of service
- CVSS 4.3 Medium
Kibana Improper Authorization
- Elastic Kibana
- Broken access control
- CVSS 4.3 Medium
Kibana Improper Authorization
- Elastic Kibana
- Broken access control
- CVSS 6.5 Medium
Kibana Allocation of Resources Without Limits or Throttling
- Elastic Kibana
- Denial of service
- CVSS 6.1 Medium
Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Elastic Kibana
- Cross-site scripting (XSS)