Elasticsearch Kibana 4.2.0

CPE Details

Elasticsearch Kibana 4.2.0
elasticsearch
kibana
4.2.0
2015-12-08
17h29 +00:00
2020-08-14
15h30 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:elasticsearch:kibana:4.2.0:*:*:*:*:*:*:*

Informations

Vendor

elasticsearch

Product

kibana

Version

4.2.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-7016 2020-07-27 16h00 +00:00 Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.
4.8
Medium
CVE-2020-7017 2020-07-27 16h00 +00:00 In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.
6.7
Medium