Skip to content
OpenAdvisories
High · 8.2 CVE-2025-25017 EUVD-2025-33705GHSA-866g-x98c-rprc

Kibana Stored Cross-Site Scripting (XSS)

Published Oct 10, 2025 · Updated Oct 10, 2025 · Assigned by elastic

Vendor: Elastic Product: Kibana

Description

Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS)

Affected products

VendorProductAffectedFixed
Elastic Kibana 7.0.0 – ≤ 7.17.29, 8.0.0 – ≤ 8.18.7, 8.19.0 – ≤ 8.19.3, 9.0.0 – ≤ 9.0.6, 9.1.0 – ≤ 9.1.3 —

Advisories 1

References