Elastic Kibana 7.17.16

CPE Details

Elastic Kibana 7.17.16
elastic
kibana
7.17.16
2024-08-22
12h23 +00:00
2024-08-22
12h23 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:elastic:kibana:7.17.16:*:*:*:*:*:*:*

Informations

Vendor

elastic

Product

kibana

Version

7.17.16

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-37287 2024-08-13 11h33 +00:00 A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary code execution.
9.1
Critique
CVE-2024-23443 2024-06-19 13h47 +00:00 A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack.
4.9
Moyen
CVE-2024-23442 2024-06-14 14h26 +00:00 An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL.
6.1
Moyen