Kibana Security Vulnerabilities and Issues — Kibana CVE List

Lucene search

ElasticKibana

2 matches found

CVE•added 2015/06/15 3:59 p.m.•54 views

CVE-2015-4093

Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.7AI score0.00237EPSS

CVE•added 2015/12/07 8:59 p.m.•50 views

CVE-2015-8131

Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

6.8CVSS7.2AI score0.00116EPSS