Kibana vulnerabilities

42 known vulnerabilities in Kibana from Elastic. 42 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Kibana: Improper Control of Generation of Code

  CVE-2023-31414May 4, 2023Elastic

  Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with write access to Kibana yaml or env configuration could add a specific payload that will attempt to execute JavaScript code. This could lead to the attacker executing

• 10.0 Critical severity

  Kibana Arbitrary Code Execution Exploited

  CVE-2019-7609Mar 25, 2019ElasticEPSS 95.3%

  Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an a