Elastic Stack 6.8.2 and 7.2.1 security update

🗓️ 30 Jul 2019 18:15:54Reported by ElasticCoType

Elastic Stack fixes Elasticsearch header race condition (CVE-2019-7614), Kibana SSRF (CVE-2019-7616), and lodash prototype pollution.

Reporter	Title	Published	Views	Family All 136
IBM Security Bulletins	Security Bulletin: Node.js lodash vulnerability affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) ( CVE-2019-10744)	22 Feb 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Drupal dated modernizr library	25 Aug 202114:41	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of the lodash library	17 Apr 202613:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to an Elasticsearch vulnerability (CVE-2019-7614)	27 Sep 202020:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI	4 Jun 202619:41	–	ibm
IBM Security Bulletins	Security Bulletin: Possible denial of service vulnerability in Watson Knowledge Catalog for IBM Cloud Pak for Data	1 Apr 202000:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private - lodash (CVE-2019-10744)	18 Feb 202020:19	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	18 Oct 202213:51	–	ibm

30 Jul 2019 18:15Current

7.3High risk

Vulners AI Score7.3

CVSS 26.4

CVSS 3.19.1

EPSS0.18518