Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

KEV

Categories

All 🌐 Web Application 🧭 Browser 🖥️ Operating System 📱 Mobile 🛰️ Network Infrastructure ☁️ Cloud / Container 📝 CMS / Site Builder 🗄️ Database / Storage 🔐 Auth / Identity 🔑 Cryptography 🛠️ DevOps / CI-CD 🤖 AI / ML 🔌 IoT / Embedded 🧩 Hardware / Firmware 🏢 Enterprise SaaS 🧰 Developer Tooling ☠️ Malicious Package 📦 Other

Tag groups

All 💬 Programming Languages 22 🧱 Web Frameworks 29 📱 Mobile Platforms 6 🤖 AI/ML Frameworks 11 🖥️ Web Servers 9 🗄️ Databases 13 📝 CMS 9 ☁️ Cloud Platforms 11 📦 Container Tech 12 🖥️ Operating Systems 15 ⚔️ Attack Types 25 🧬 CWE 185 🏢 Vendors 581 📦 Products 666 🌳 Package Ecosystems 24 🛠️ DevOps Tools 17 📡 Protocols 15

Popular tags (Top 40)

Rootio Linux419 Microsoft386 C237 Java183 Jre178 Java Min178 Bitnami178 Windows177 Rootdebian11175 Rootdebian12151 Linux130 Cwe 20125 Cwe 78120 Linux Kernel106 Cwe 787105 Apple99 Cwe 41699 Cwe 2296 Rootdebian1393 Cwe 11990 Cisco89 Denial of Service85 Cwe 9484 Multiple Products79 Adobe78 Google77 Cwe 50270 Cwe 7966 Cwe 8954 Apache47 Cwe 91844 Cwe 28443 Oracle42 Cwe 28741 JavaScript41 PHP41 Cwe 7740 Chromium V838 Cwe 30638 Cwe 84337

Filtering: Tag: kibana Clear

ID	Title	Severity	Tags	Detected
CVE-2026-49091	Vulnerability in elastic (CVE-2026-49091) vulnerability in elastic (CVE-2026-49091). Successful exploitation can lead to full system takeover.	High	Cwe 116 Elastic Kibana	6 days ago
CVE-2026-56151	Vulnerability in dos (CVE-2026-56151) vulnerability in dos (CVE-2026-56151). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 20 Elastic Kibana	6 days ago
CVE-2026-49088	Vulnerability in elastic (CVE-2026-49088) vulnerability in elastic (CVE-2026-49088). Confidential information can be exposed externally.	Medium	Cwe 532 Elastic Kibana	6 days ago
CVE-2026-49087	Vulnerability in dos (CVE-2026-49087) vulnerability in dos (CVE-2026-49087). Risk of unauthorized operations or information disclosure.	Medium	Denial of Service Cwe 770 Elastic Kibana	6 days ago
CVE-2026-49094	Vulnerability in elk (CVE-2026-49094) vulnerability in elk (CVE-2026-49094). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16` or later.	Medium	Denial of Service Cwe 400 Elastic Kibana	1 month ago
CVE-2026-49093	SSRF (Server-Side Request Forgery) in elk (CVE-2026-49093) SSRF in elk (CVE-2026-49093). Confidential information can be exposed externally. Mitigation: upgrade to `9.3.3` or later.	Medium	Cwe 918 Elastic Kibana	1 month ago
CVE-2026-49095	Vulnerability in elk (CVE-2026-49095) vulnerability in elk (CVE-2026-49095). Confidential information can be exposed externally. Mitigation: upgrade to `8.19.16, 9.3.5, 9.4.2` or later.	Medium	Privilege Escalation Cwe 20 Elastic Kibana	1 month ago
CVE-2026-42398	SSRF (Server-Side Request Forgery) in elk (CVE-2026-42398) SSRF in elk (CVE-2026-42398). Confidential information can be exposed externally. Mitigation: upgrade to `9.2.8, 9.3.2` or later.	High	Cwe 918 Elastic Kibana	1 month ago
CVE-2026-42400	Vulnerability in elk (CVE-2026-42400) vulnerability in elk (CVE-2026-42400). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5, 9.4.2` or later.	Medium	Denial of Service Cwe 400 Elastic Kibana	1 month ago
CVE-2026-42399	Vulnerability in elk (CVE-2026-42399) vulnerability in elk (CVE-2026-42399). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.	Medium	Denial of Service Cwe 400 Elastic Kibana	1 month ago
CVE-2026-42401	Cross-Site Scripting (XSS) in elk (CVE-2026-42401) cross-site scripting in elk (CVE-2026-42401). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.4.0` or later.	Medium	Cwe 79 Elastic Kibana	1 month ago
CVE-2026-33464	Vulnerability in elk (CVE-2026-33464) vulnerability in elk (CVE-2026-33464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.4.2` or later.	Medium	C Denial of Service Cwe 400 Elastic +1	1 month ago
CVE-2026-33463	Vulnerability in elk (CVE-2026-33463) vulnerability in elk (CVE-2026-33463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.	Medium	Cwe 672 Elastic Kibana	1 month ago
CVE-2026-33462	Path Traversal in elk (CVE-2026-33462) path traversal in elk (CVE-2026-33462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.	Medium	Path Traversal Cwe 22 Elastic Kibana	1 month ago
CVE-2019-7609 KEV	[KEV] Code Injection in Elastic kibana (CVE-2019-7609) code injection in Elastic kibana (CVE-2019-7609). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.	High	Elastic Kibana Cwe 94	4 years ago
CVE-2017-11482	Open Redirect in elastic (CVE-2017-11482) vulnerability in elastic (CVE-2017-11482). Risk of unauthorized operations or information disclosure.	Medium	Cwe 601 Elastic Kibana	8 years ago
CVE-2017-11481	Cross-Site Scripting (XSS) in elastic (CVE-2017-11481) cross-site scripting in elastic (CVE-2017-11481). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Elastic Kibana	8 years ago
CVE-2017-11479	Cross-Site Scripting (XSS) in elastic (CVE-2017-11479) cross-site scripting in elastic (CVE-2017-11479). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Elastic Kibana +1	8 years ago
CVE-2017-8443	Vulnerability in elastic (CVE-2017-8443) vulnerability in elastic (CVE-2017-8443). Confidential information can be exposed externally.	Medium	Cwe 598 Cwe 200 Elastic Kibana	9 years ago
CVE-2017-8452	Vulnerability in elastic (CVE-2017-8452) vulnerability in elastic (CVE-2017-8452). Risk of unauthorized operations or information disclosure.	High	Cwe 775 Cwe 769 Elastic Kibana	9 years ago
CVE-2017-8451	Open Redirect in elastic (CVE-2017-8451) vulnerability in elastic (CVE-2017-8451). Risk of unauthorized operations or information disclosure.	Medium	Cwe 601 Elastic Kibana	9 years ago
CVE-2016-10366	Cross-Site Scripting (XSS) in elastic (CVE-2016-10366) cross-site scripting in elastic (CVE-2016-10366). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Elastic Kibana	9 years ago
CVE-2016-10365	Open Redirect in elastic (CVE-2016-10365) vulnerability in elastic (CVE-2016-10365). Risk of unauthorized operations or information disclosure.	Medium	Cwe 601 Elastic Kibana	9 years ago
CVE-2016-10364	Vulnerability in elastic (CVE-2016-10364) vulnerability in elastic (CVE-2016-10364). Confidential information can be exposed externally.	Medium	Cwe 306 Cwe 264 Elastic Kibana	9 years ago
CVE-2016-1000220	Cross-Site Scripting (XSS) in elastic (CVE-2016-1000220) cross-site scripting in elastic (CVE-2016-1000220). Risk of unauthorized operations or information disclosure.	Medium	JavaScript Cross-Site Scripting Cwe 79 Elastic +1	9 years ago
CVE-2016-1000219	Vulnerability in elastic (CVE-2016-1000219) vulnerability in elastic (CVE-2016-1000219). Data can be tampered with by attackers. Exploitable via `Authorization header`.	High	Cwe 285 Elastic Kibana	9 years ago
CVE-2015-9056	Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack. Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.	Medium	Cross-Site Scripting Cwe 79 Elastic Kibana	9 years ago
CVE-2017-8440	Cross-Site Scripting (XSS) in elastic (CVE-2017-8440) cross-site scripting in elastic (CVE-2017-8440). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Elastic Kibana	9 years ago
CVE-2017-8439	Cross-Site Scripting (XSS) in elastic (CVE-2017-8439) cross-site scripting in elastic (CVE-2017-8439). Risk of unauthorized operations or information disclosure.	Medium	Cross-Site Scripting Cwe 79 Elastic Kibana	9 years ago

Vulnerabilities

🍪 About cookies