CVE-2017-8440

2017-06-0514:29:00

Google

osv.dev

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Starting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover page that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

CPENameOperatorVersion
elasticsearcheq0.19.0
elasticsearcheq0.90.0.RC1
elasticsearcheq4.2.0-beta1
elasticsearcheq0.19.0.RC2
elasticsearcheq5.3.0
elasticsearcheq0.19.0.RC3
elasticsearcheq4.0.0
elasticsearcheq0.10.0
elasticsearcheq0.90.0.Beta1
elasticsearcheq5.0.0-alpha1

Name	Operator	Version
elasticsearch	eq	0.19.0
elasticsearch	eq	0.90.0.RC1
elasticsearch	eq	4.2.0-beta1
elasticsearch	eq	0.19.0.RC2
elasticsearch	eq	5.3.0
elasticsearch	eq	0.19.0.RC3
elasticsearch	eq	4.0.0
elasticsearch	eq	0.10.0
elasticsearch	eq	0.90.0.Beta1
elasticsearch	eq	5.0.0-alpha1