Vulnerability Details CVE-2016-1000220
Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 62.8%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2016-1000220
-
cpe:2.3:a:elastic:kibana:4.1.0
-
cpe:2.3:a:elastic:kibana:4.1.1
-
cpe:2.3:a:elastic:kibana:4.1.10
-
cpe:2.3:a:elastic:kibana:4.1.2
-
cpe:2.3:a:elastic:kibana:4.1.3
-
cpe:2.3:a:elastic:kibana:4.1.4
-
cpe:2.3:a:elastic:kibana:4.1.5
-
cpe:2.3:a:elastic:kibana:4.1.6
-
cpe:2.3:a:elastic:kibana:4.1.7
-
cpe:2.3:a:elastic:kibana:4.1.8
-
cpe:2.3:a:elastic:kibana:4.1.9
-
cpe:2.3:a:elastic:kibana:4.5.0
-
cpe:2.3:a:elastic:kibana:4.5.1
-
cpe:2.3:a:elastic:kibana:4.5.2
-
cpe:2.3:a:elastic:kibana:4.5.3