CVE-2016-10366

Опубликовано: 16 июн. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack.

Ссылки

https://www.elastic.co/community/security
Vendor Advisory
https://www.elastic.co/community/security
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:elastic:kibana:4.3.0:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.3.1:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.3.2:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.3.3:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.4.0:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.4.1:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.4.2:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.5.0:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.5.1:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.5.2:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.5.3:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.5.4:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.6.0:*:*:*:*:*:*:*

cpe:2.3:a:elastic:kibana:4.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00265

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2016-10366

CVSS3: 6.1

redhat

больше 8 лет назад

Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack.

CVE-2016-10366

CVSS3: 6.1

debian

больше 8 лет назад

Kibana versions after and including 4.3 and before 4.6.2 are vulnerabl ...

GHSA-2fr8-xhpc-wf7p

CVSS3: 6.1

github

больше 3 лет назад

Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack.

EPSS

Процентиль: 50%

0.00265

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79