Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-11481

Опубликовано: 08 дек. 2017
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:elastic:kibana:5.6.0:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:5.6.1:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:5.6.2:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:5.6.3:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:5.6.4:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:6.0.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:6.0.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:6.0.0:beta1:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:6.0.0:beta2:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:6.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:elastic:kibana:6.0.0:rc2:*:*:*:*:*:*

EPSS

Процентиль: 50%
0.00266
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79
CWE-79

Связанные уязвимости

redhat логотип

CVE-2017-11481

CVSS3: 6.1
redhat
около 8 лет назад

Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

debian логотип

CVE-2017-11481

CVSS3: 6.1
debian
около 8 лет назад

Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (X ...

github логотип

GHSA-hjcr-mhf6-4rv6

CVSS3: 6.1
github
больше 3 лет назад

Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

EPSS

Процентиль: 50%
0.00266
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79
CWE-79