Lucene search
Veracode Vulnerability DatabaseVERACODE:25967HistoryJul 28, 2020 - 4:20 a.m.
Denial Of Service (DoS)
2020-07-2804:20:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
35.4%
kibana is vulnerable to denial of service (DoS). The vulnerability exists as the timelion labels could be used to cause slowdowns when parsed through the RegExp object.
References
discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update/242786
github.com/elastic/kibana/commit/0d7471f74166abbdf95db0f0bb4079883d083dd7
github.com/elastic/kibana/commit/de358b62f8845cebd1cd3530d9ebf123a89b9b1b
www.elastic.co/community/security#ESA-2020-09
www.elastic.co/community/security/
www.oracle.com//security-alerts/cpujul2021.html
Related
redhatcve
redhatcve
CVE-2020-7016
2020-08-04 05:13:18
cvelist
cvelist
CVE-2020-7016
2020-07-27 18:00:15
osv
osv
BIT-elk-2020-7016
2024-03-06 10:51:48
CVE-2020-7016
2020-07-27 18:15:14
BIT-kibana-2020-7016
2024-03-06 10:54:48
nvd
nvd
CVE-2020-7016
2020-07-27 18:15:14
cve
cve
CVE-2020-7016
2020-07-27 18:15:14
prion
prion
Design/Logic Flaw
2020-07-27 18:15:00
openvas
openvas
Elastic Kibana < 6.8.11, 7.x < 7.8.1 Multiple Vulnerabilities - Windows
2020-08-03 00:00:00
Elastic Kibana < 6.8.11, 7.x < 7.8.1 Multiple Vulnerabilities - Linux
2020-08-03 00:00:00
nessus
nessus
Photon OS 3.0: Kibana PHSA-2020-3.0-0135
2020-09-08 00:00:00
Photon OS 2.0: Kibana PHSA-2020-2.0-0281
2020-09-21 00:00:00
Photon OS 1.0: Kibana PHSA-2020-1.0-0321
2020-10-21 00:00:00
ibm
ibm
photon
photon
oracle
oracle
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00