CVE-2016-10365

2017-06-1621:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.3%

JSON

Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link in the Kibana domain that redirects to an arbitrary website.

CPENameOperatorVersion
elasticsearcheq0.19.0
elasticsearcheq0.90.0.RC1
elasticsearcheq4.2.0-beta1
elasticsearcheq0.19.0.RC2
elasticsearcheq0.19.0.RC3
elasticsearcheq4.0.0
elasticsearcheq0.10.0
elasticsearcheq0.90.0.Beta1
elasticsearcheq5.0.0-alpha1
elasticsearcheq0.18.0

Name	Operator	Version
elasticsearch	eq	0.19.0
elasticsearch	eq	0.90.0.RC1
elasticsearch	eq	4.2.0-beta1
elasticsearch	eq	0.19.0.RC2
elasticsearch	eq	0.19.0.RC3
elasticsearch	eq	4.0.0
elasticsearch	eq	0.10.0
elasticsearch	eq	0.90.0.Beta1
elasticsearch	eq	5.0.0-alpha1
elasticsearch	eq	0.18.0