Elastic Stack 7.11.0 and 6.8.14 Security Update

🗓️ 10 Feb 2021 17:50:33Reported by ElasticCoType

Elastic Stack fix for Elasticsearch disclosure and Kibana Vega XSS; upgrade to Elasticsearch 7.10.0 or 6.8.14 and Kibana 7.10.2 or 6.8.14.

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin:Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager	27 Apr 202119:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to Elastic vulnerabilities (CVE-2020-7021 )	3 Sep 202113:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability affects IBM Observability with Instana	11 Jan 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM Business Automation Workflow and IBM Business Process Manager (BPM) offline documentation	28 Sep 202107:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in Elasticsearch shipped with IBM Tivoli Netcool Impact	6 Jul 202205:31	–	ibm
CBLMariner	CVE-2020-7021 affecting package rubygem-elasticsearch 7.6.0-1	26 May 202219:04	–	cbl_mariner
Circl	CVE-2020-7021	28 Jan 202401:48	–	circl
CNNVD	Vega 跨站脚本漏洞	30 Dec 202000:00	–	cnnvd
CNNVD	Elasticsearch 日志信息泄露漏洞	10 Feb 202100:00	–	cnnvd
CNVD	Vega Cross-Site Scripting Vulnerability	3 Jan 202100:00	–	cnvd

10 Feb 2021 17:50Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24

CVSS 3.18.7

EPSS0.00407