Skip to content
OpenAdvisories

Product · Elastic

Kibana

196 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-25014 Public exploit EPSS 22%

    Kibana arbitrary code execution via prototype pollution

    A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.

    Elastic Kibana
  • Medium 4.9
    CVE-2024-23443 Public exploit

    A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading …

    Elastic Kibana
  • Unscored —
    CVE-2020-7012 Public exploit EPSS 18%

    Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authe…

    Elastic Kibana
  • Unscored —
    CVE-2019-7616 Public exploit

    Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration fo…

    Elastic Kibana
  • Critical 9.8
    CVE-2019-7609 Exploited Public exploit Scanner template EPSS 95%

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacke…

    Elastic Kibana
    KEV Jan 10, 2022
  • Unscored —
    CVE-2018-17246 Public exploit Scanner template EPSS 84%

    Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker wit…

    Elastic Kibana