CVE-2017-11479

2017-09-2901:34:48

Google

osv.dev

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.2%

JSON

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CPENameOperatorVersion
elasticsearcheq0.19.0
elasticsearcheq0.90.0.RC1
elasticsearcheq4.2.0-beta1
elasticsearcheq0.19.0.RC2
elasticsearcheq5.3.0
elasticsearcheq0.19.0.RC3
elasticsearcheq5.5.0
elasticsearcheq5.6.0
elasticsearcheq4.0.0
elasticsearcheq0.10.0

Name	Operator	Version
elasticsearch	eq	0.19.0
elasticsearch	eq	0.90.0.RC1
elasticsearch	eq	4.2.0-beta1
elasticsearch	eq	0.19.0.RC2
elasticsearch	eq	5.3.0
elasticsearch	eq	0.19.0.RC3
elasticsearch	eq	5.5.0
elasticsearch	eq	5.6.0
elasticsearch	eq	4.0.0
elasticsearch	eq	0.10.0