Lucene search
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_98979HistoryMar 05, 2020 - 12:00 a.m.
Kibana < 6.8.2 Multiple Vulnerabilities
2020-03-0500:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
16
According to its self-reported version number, the Kibana application running on the remote host is prior to 6.8.2 or 7.x prior to 7.2.1. It is, therefore, affected by :
-
A prototype pollution vulnerability in lodash. (CVE-2019-10744)
-
A server-side request forgery (SSRF) vulnerability in the graphite integration for Timelion visualizer. (CVE-2019-7616)
Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.
No source data| Vendor | Product | Version | CPE |
|---|---|---|---|
| elasticsearch | kibana | * | cpe:2.3:a:elasticsearch:kibana:*:*:*:*:*:*:*:* |
Related
nessus
nessus
Kibana 7.x < 7.2.1 Multiple Vulnerabilities
2020-03-05 00:00:00
F5 Networks BIG-IP : Lodash library vulnerability (K47105354)
2020-04-24 00:00:00
Photon OS 3.0: Kibana PHSA-2020-3.0-0088
2020-05-13 00:00:00
openvas
openvas
ibm
ibm
redhatcve
redhatcve
osv
osv
CVE-2019-10744
2019-07-26 00:15:11
Prototype Pollution in lodash
2019-07-10 19:45:23
CVE-2019-7616
2019-07-30 22:15:12
githubexploit
githubexploit
Exploit for CVE-2019-10744
2020-12-01 09:18:57
Exploit for Server-Side Request Forgery in Elastic Kibana
2020-06-02 07:28:13
nodejs
nodejs
Prototype Pollution
2020-05-20 01:36:49
Prototype Pollution
2019-07-15 17:22:56
prion
prion
Design/Logic Flaw
2019-07-26 00:15:00
Server side request forgery (ssrf)
2019-07-30 22:15:00
thn
thn
veracode
veracode
Prototype Pollution
2019-06-28 13:52:21
Cross-Site Request Forgery (CSRF)
2019-07-31 06:36:29
cve
cve
CVE-2019-10744
2019-07-26 00:15:00
CVE-2019-7616
2019-07-30 22:15:00
ubuntucve
ubuntucve
CVE-2019-10744
2019-07-26 00:00:00
github
github
Prototype Pollution in lodash
2019-07-10 19:45:23
f5
f5
K47105354 : Lodash library vulnerability CVE-2019-10744
2019-11-13 00:00:00
debiancve
debiancve
CVE-2019-10744
2019-07-26 00:15:00
checkpoint_advisories
checkpoint_advisories
Kibana Elasticsearch Server Side Request Forgery (CVE-2019-7616)
2020-06-23 00:00:00
kitploit
kitploit
Spyse: All-In-One Cybersecurity Search Engine
2020-06-26 04:33:00
redhat
redhat
(RHSA-2019:3024) Moderate: ovirt-web-ui security and bug fix update
2019-10-10 14:49:46
(RHSA-2020:2362) Moderate: Red Hat OpenShift Service Mesh security update
2020-06-02 15:21:32
photon
photon
Important Photon OS Security Update - PHSA-2020-0088
2020-05-10 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0088
2020-05-10 00:00:00
Important Photon OS Security Update - PHSA-2020-0253
2020-06-13 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Related for WEB_APPLICATION_SCANNING_98979