According to its self-reported version number, the Kibana application running on the remote host is prior to 6.8.2 or 7.x prior to 7.2.1. It is, therefore, affected by :

 - A prototype pollution vulnerability in lodash. (CVE-2019-10744)

 - A server-side request forgery (SSRF) vulnerability in the graphite integration for Timelion visualizer. (CVE-2019-7616)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the kibana package has been released.

ID	Name	Product	Family	Published	Updated	Severity
98980	Kibana 7.x < 7.2.1 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	3/5/2020	3/14/2023	critical
98979	Kibana < 6.8.2 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	3/5/2020	3/14/2023	critical
137639	Photon OS 1.0: Kibana PHSA-2020-1.0-0301	Nessus	PhotonOS Local Security Checks	6/18/2020	3/6/2024	high
136578	Photon OS 3.0: Kibana PHSA-2020-3.0-0088	Nessus	PhotonOS Local Security Checks	5/13/2020	7/24/2024	medium

Detections

Analytics

Plugins Search

critical

critical

high

medium