CVE-2017-8439

2017-06-0514:29:00

Google

osv.dev

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users.

CPENameOperatorVersion
elasticsearcheq0.19.0
elasticsearcheq0.90.0.RC1
elasticsearcheq4.2.0-beta1
elasticsearcheq0.19.0.RC2
elasticsearcheq0.19.0.RC3
elasticsearcheq4.0.0
elasticsearcheq0.10.0
elasticsearcheq0.90.0.Beta1
elasticsearcheq5.0.0-alpha1
elasticsearcheq0.18.0

Name	Operator	Version
elasticsearch	eq	0.19.0
elasticsearch	eq	0.90.0.RC1
elasticsearch	eq	4.2.0-beta1
elasticsearch	eq	0.19.0.RC2
elasticsearch	eq	0.19.0.RC3
elasticsearch	eq	4.0.0
elasticsearch	eq	0.10.0
elasticsearch	eq	0.90.0.Beta1
elasticsearch	eq	5.0.0-alpha1
elasticsearch	eq	0.18.0