Approved changes feed: RSS · Atom

cpe:2.3:a:elastic:kibana:5.4.2:*:*:*:*:*:*:*

part: a version: 5.4.2 update: *

VendorElastic (1d0b8d2a-fd47-5b20-b005-34326f9bd037)
ProductKibana (c13ee88f-9cd3-57c3-8d6e-bbf4a9872328)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/elastic/kibana purl2cpe 2026-06-01 10:15:15.204372
pkg:github/elastic/kibana purl2cpe 2026-06-01 10:15:15.204373
pkg:rpm/opensuse/kibana purl2cpe 2026-06-01 10:15:15.204375

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11479 vulnerable 2026-06-03 14:36:28.696726 Details available
Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Published: 2017-09-28T19:00:00.000Z
Updated: 2024-08-05T18:12:39.828Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.