Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack.
2017-06-16T21:29:00.557
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 6.1 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | elastic | kibana | 4.3.0 | Yes |
| Application | elastic | kibana | 4.3.1 | Yes |
| Application | elastic | kibana | 4.3.2 | Yes |
| Application | elastic | kibana | 4.3.3 | Yes |
| Application | elastic | kibana | 4.4.0 | Yes |
| Application | elastic | kibana | 4.4.1 | Yes |
| Application | elastic | kibana | 4.4.2 | Yes |
| Application | elastic | kibana | 4.5.0 | Yes |
| Application | elastic | kibana | 4.5.1 | Yes |
| Application | elastic | kibana | 4.5.2 | Yes |
| Application | elastic | kibana | 4.5.3 | Yes |
| Application | elastic | kibana | 4.5.4 | Yes |
| Application | elastic | kibana | 4.6.0 | Yes |
| Application | elastic | kibana | 4.6.1 | Yes |