CPE Details
Elasticsearch Kibana 6.5.4
6.5.4
2019-02-04
16h16 +00:00
16h16 +00:00
2020-08-14
15h19 +00:00
15h19 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:elasticsearch:kibana:6.5.4:*:*:*:*:*:*:*
Informations
Vendor
elasticsearchProduct
kibanaVersion
6.5.4Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive. | 4.8 |
Moyen |
||
| In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization. | 6.7 |
Moyen |
