Vulnerabilities (CVE)

Filtered by vendor Elastic Subscribe
Filtered by product Kibana
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-8131 1 Elastic 1 Kibana 2020-10-19 6.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2015-4093 1 Elastic 1 Kibana 2020-08-14 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.