Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: vendors Tag: kibana Clear
ID Title
CVE-2026-63261 Vulnerability in dos (CVE-2026-63261)
vulnerability in dos (CVE-2026-63261). Risk of unauthorized operations or information disclosure.
CVE-2026-63259 Vulnerability in elastic (CVE-2026-63259)
vulnerability in elastic (CVE-2026-63259). Risk of unauthorized operations or information disclosure.
CVE-2026-63142 Authorization Flaw in elastic (CVE-2026-63142)
vulnerability in elastic (CVE-2026-63142). Risk of unauthorized operations or information disclosure.
CVE-2026-63260 Vulnerability in dos (CVE-2026-63260)
vulnerability in dos (CVE-2026-63260). Risk of unauthorized operations or information disclosure.
CVE-2026-63145 Authorization Flaw in elastic (CVE-2026-63145)
vulnerability in elastic (CVE-2026-63145). Risk of unauthorized operations or information disclosure.
CVE-2026-63262 Vulnerability in elastic (CVE-2026-63262)
vulnerability in elastic (CVE-2026-63262). Risk of unauthorized operations or information disclosure.
CVE-2026-63143 Vulnerability in elastic (CVE-2026-63143)
vulnerability in elastic (CVE-2026-63143). Risk of unauthorized operations or information disclosure.
CVE-2026-63141 Vulnerability in elastic (CVE-2026-63141)
vulnerability in elastic (CVE-2026-63141). Risk of unauthorized operations or information disclosure.
CVE-2026-63139 Vulnerability in dos (CVE-2026-63139)
vulnerability in dos (CVE-2026-63139). Risk of unauthorized operations or information disclosure.
CVE-2026-56147 Vulnerability in elastic (CVE-2026-56147)
vulnerability in elastic (CVE-2026-56147). Confidential information can be exposed externally.
CVE-2026-56146 Authorization Flaw in elastic (CVE-2026-56146)
vulnerability in elastic (CVE-2026-56146). Risk of unauthorized operations or information disclosure.
CVE-2026-49092 Authorization Flaw in elastic (CVE-2026-49092)
vulnerability in elastic (CVE-2026-49092). Risk of unauthorized operations or information disclosure.
CVE-2026-42397 Vulnerability in dos (CVE-2026-42397)
vulnerability in dos (CVE-2026-42397). Risk of unauthorized operations or information disclosure.
CVE-2026-49091 Vulnerability in elastic (CVE-2026-49091)
vulnerability in elastic (CVE-2026-49091). Successful exploitation can lead to full system takeover.
CVE-2026-56151 Vulnerability in dos (CVE-2026-56151)
vulnerability in dos (CVE-2026-56151). Risk of unauthorized operations or information disclosure.
CVE-2026-49088 Vulnerability in elastic (CVE-2026-49088)
vulnerability in elastic (CVE-2026-49088). Confidential information can be exposed externally.
CVE-2026-49087 Vulnerability in dos (CVE-2026-49087)
vulnerability in dos (CVE-2026-49087). Risk of unauthorized operations or information disclosure.
CVE-2026-49095 Vulnerability in elk (CVE-2026-49095)
vulnerability in elk (CVE-2026-49095). Confidential information can be exposed externally. Mitigation: upgrade to `8.19.16, 9.3.5, 9.4.2` or later.
CVE-2026-49093 SSRF (Server-Side Request Forgery) in elk (CVE-2026-49093)
SSRF in elk (CVE-2026-49093). Confidential information can be exposed externally. Mitigation: upgrade to `9.3.3` or later.
CVE-2026-49094 Vulnerability in elk (CVE-2026-49094)
vulnerability in elk (CVE-2026-49094). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16` or later.
CVE-2026-42399 Vulnerability in elk (CVE-2026-42399)
vulnerability in elk (CVE-2026-42399). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
CVE-2026-42400 Vulnerability in elk (CVE-2026-42400)
vulnerability in elk (CVE-2026-42400). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5, 9.4.2` or later.
CVE-2026-42398 SSRF (Server-Side Request Forgery) in elk (CVE-2026-42398)
SSRF in elk (CVE-2026-42398). Confidential information can be exposed externally. Mitigation: upgrade to `9.2.8, 9.3.2` or later.
CVE-2026-33464 Vulnerability in elk (CVE-2026-33464)
vulnerability in elk (CVE-2026-33464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.4.2` or later.
CVE-2026-42401 Cross-Site Scripting (XSS) in elk (CVE-2026-42401)
cross-site scripting in elk (CVE-2026-42401). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.4.0` or later.
CVE-2026-33462 Path Traversal in elk (CVE-2026-33462)
path traversal in elk (CVE-2026-33462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
CVE-2026-33463 Vulnerability in elk (CVE-2026-33463)
vulnerability in elk (CVE-2026-33463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
CVE-2026-33458 SSRF (Server-Side Request Forgery) in elastic (CVE-2026-33458)
SSRF in elastic (CVE-2026-33458). Confidential information can be exposed externally.
CVE-2026-33459 Vulnerability in dos (CVE-2026-33459)
vulnerability in dos (CVE-2026-33459). Risk of unauthorized operations or information disclosure.
CVE-2026-4498 Vulnerability in elastic (CVE-2026-4498)
vulnerability in elastic (CVE-2026-4498). Confidential information can be exposed externally.
CVE-2026-33461 Authorization Flaw in elastic (CVE-2026-33461)
vulnerability in elastic (CVE-2026-33461). Confidential information can be exposed externally.
CVE-2026-33460 Authorization Flaw in elastic (CVE-2026-33460)
vulnerability in elastic (CVE-2026-33460). Risk of unauthorized operations or information disclosure.
CVE-2019-7609 KEV [KEV] Code Injection in Elastic kibana (CVE-2019-7609)
code injection in Elastic kibana (CVE-2019-7609). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2017-11481 Cross-Site Scripting (XSS) in elastic (CVE-2017-11481)
cross-site scripting in elastic (CVE-2017-11481). Risk of unauthorized operations or information disclosure.
CVE-2017-11482 Open Redirect in elastic (CVE-2017-11482)
vulnerability in elastic (CVE-2017-11482). Risk of unauthorized operations or information disclosure.
CVE-2017-11479 Cross-Site Scripting (XSS) in elastic (CVE-2017-11479)
cross-site scripting in elastic (CVE-2017-11479). Risk of unauthorized operations or information disclosure.
CVE-2017-8443 Vulnerability in elastic (CVE-2017-8443)
vulnerability in elastic (CVE-2017-8443). Confidential information can be exposed externally.
CVE-2017-8452 Vulnerability in elastic (CVE-2017-8452)
vulnerability in elastic (CVE-2017-8452). Risk of unauthorized operations or information disclosure.
CVE-2017-8451 Open Redirect in elastic (CVE-2017-8451)
vulnerability in elastic (CVE-2017-8451). Risk of unauthorized operations or information disclosure.
CVE-2016-10366 Cross-Site Scripting (XSS) in elastic (CVE-2016-10366)
cross-site scripting in elastic (CVE-2016-10366). Risk of unauthorized operations or information disclosure.
CVE-2016-10365 Open Redirect in elastic (CVE-2016-10365)
vulnerability in elastic (CVE-2016-10365). Risk of unauthorized operations or information disclosure.
CVE-2016-10364 Vulnerability in elastic (CVE-2016-10364)
vulnerability in elastic (CVE-2016-10364). Confidential information can be exposed externally.
CVE-2016-1000220 Cross-Site Scripting (XSS) in elastic (CVE-2016-1000220)
cross-site scripting in elastic (CVE-2016-1000220). Risk of unauthorized operations or information disclosure.
CVE-2016-1000219 Vulnerability in elastic (CVE-2016-1000219)
vulnerability in elastic (CVE-2016-1000219). Data can be tampered with by attackers. Exploitable via `Authorization header`.
CVE-2015-9056 Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.
Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.
CVE-2017-8440 Cross-Site Scripting (XSS) in elastic (CVE-2017-8440)
cross-site scripting in elastic (CVE-2017-8440). Risk of unauthorized operations or information disclosure.
CVE-2017-8439 Cross-Site Scripting (XSS) in elastic (CVE-2017-8439)
cross-site scripting in elastic (CVE-2017-8439). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →