Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-7016

Опубликовано: 27 июл. 2020
Источник: nvd
CVSS3: 4.8
CVSS2: 2.1
EPSS Низкий

Описание

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:elasticsearch:kibana:*:*:*:*:*:*:*:*
Версия до 6.8.11 (исключая)
cpe:2.3:a:elasticsearch:kibana:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.8.1 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00377
Низкий

4.8 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-185
CWE-400

Связанные уязвимости

redhat логотип

CVE-2020-7016

CVSS3: 4.8
redhat
больше 5 лет назад

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.

debian логотип

CVE-2020-7016

CVSS3: 4.8
debian
больше 5 лет назад

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (D ...

github логотип

GHSA-hrj2-4hpm-cjw9

CVSS3: 4.8
github
больше 3 лет назад

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.

EPSS

Процентиль: 59%
0.00377
Низкий

4.8 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-185
CWE-400