kibana | Snyk

Direct Vulnerabilities

Known vulnerabilities in the kibana package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Directory Traversal	<0:5.6.16-2.el7
M Open Redirect	*
M CVE-2024-37279	*
M Information Exposure	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
L Information Exposure	<0:4.6.4-4.el7
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
C Authentication Bypass by Primary Weakness	<0:5.6.12-1.el7
H Incomplete Blacklist	<0:4.6.4-3.el7
H Cross-site Request Forgery (CSRF)	<0:4.6.4-3.el7
M Improper Input Validation	<0:4.6.4-4.el7
H Cross-site Request Forgery (CSRF)	<0:4.6.4-3.el7
M Improper Authentication	<0:4.6.4-3.el7
H Improper Authentication	<0:4.6.4-3.el7
M Improper Authorization	<0:4.6.4-4.el7
C Cross-site Scripting (XSS)	<0:5.6.12-1.el7
M Cross-site Scripting (XSS)	<0:4.1.11-1.el7
M Cross-site Scripting (XSS)	<0:4.1.11-1.el7
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Cross-site Request Forgery (CSRF)	*
M Information Exposure Through Log Files	*
M Information Exposure Through Log Files	<0:4.1.11-1.el7
M Information Exposure Through Log Files	*
M Information Exposure Through Log Files	*
M Information Exposure Through Log Files	<0:4.1.11-1.el7
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
L Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Missing Authorization	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improper Input Validation	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
H Information Exposure	<0:5.6.13-1.el7
H Session Fixation	<0:5.6.13-1.el7
H Resource Exhaustion	<0:5.6.13-1.el7
H Information Exposure	<0:5.6.13-1.el7
H Improper Authentication	<0:5.6.13-1.el7
H Inclusion of Functionality from Untrusted Control Sphere	<0:5.6.13-1.el7
H Cross-site Scripting (XSS)	<0:5.6.13-1.el7
H Directory Traversal	<0:5.6.13-1.el7
L Resource Exhaustion	*
L Inefficient Regular Expression Complexity	*
L Inefficient Regular Expression Complexity	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
L Open Redirect	*
L Open Redirect	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Arbitrary Code Injection	*
M Arbitrary Code Injection	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M OS Command Injection	*
M OS Command Injection	*
M Resource Exhaustion	*
M Resource Exhaustion	*
L Resource Exhaustion	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Improperly Implemented Security Check for Standard	*
L Improperly Implemented Security Check for Standard	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Resource Exhaustion	*
M Resource Exhaustion	*
L Modification of Assumed-Immutable Data (MAID)	*
L Modification of Assumed-Immutable Data (MAID)	*
M Improper Input Validation	*
M Improper Input Validation	*
H Improper Input Validation	<0:5.6.16-2.el7
H Improper Input Validation	<0:5.6.16-2.el7
H Improper Input Validation	*
H Cross-site Scripting (XSS)	<0:5.6.16-2.el7
M Cross-site Scripting (XSS)	*
M Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Modification of Assumed-Immutable Data (MAID)	*
M Modification of Assumed-Immutable Data (MAID)	*
L Modification of Assumed-Immutable Data (MAID)	*
L Modification of Assumed-Immutable Data (MAID)	*
M Improper Input Validation	*
L Arbitrary Code Injection	*
L Arbitrary Code Injection	*
L Arbitrary Code Injection	*
L Arbitrary Code Injection	*
M Improper Input Validation	*
M Files or Directories Accessible to External Parties	*
M Files or Directories Accessible to External Parties	*
C Out-of-Bounds	<0:5.6.12-1.el7

Vulnerability

Vulnerable Version

Directory Traversal

<0:5.6.16-2.el7