842 matches found
CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
EUVD-2026-64129
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-77811
CVE-2026-77811 is a stored cross-site scripting (XSS) vulnerability in the dashboards-observability plugin of OpenSearch Dashboards . The root cause is improper input validation , which allows a remote authenticated user with write permissions to saved objects to upload a saved asset containing a...
EUVD-2026-63592
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-18420
Improper input validation in OpenSearch Dashboards' TSVB plugin enables prototype pollution via crafted JSON to the metrics visualization API, yielding authenticated remote code execution. CVSS 3.1 scores 8.8 (HIGH). Affected versions are fixed in OpenSearch Dashboards 3.8.0. Exploitation in the ...
CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-59710 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-CR32-G25G-VXJJ vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-59711 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-22G5-R2X5-97CX vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-RCVQ-M9J9-6F4G vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-22G5-R2X5-97CX vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-44979 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2024-1899 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-59710 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-X426-X7CC-3FPC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-59711 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...