← All advisories

Medium severity6.1NVD Advisory· Published Jun 16, 2017· Updated Jun 17, 2026

CVE-2016-1000220

CVE-2016-1000220

Description

Kibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to execute arbitrary JavaScript in users' browsers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Elastic/Kibana2 versions
cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*range: >=4.1.0,<4.1.11
- (no CPE)range: <4.5.4, <4.1.11
Kibana/Kibanallm-fuzzy
Range: <4.5.4, <4.1.11

Patches

Vulnerability mechanics

References

2

www.securityfocus.com/bid/99179nvdThird Party AdvisoryVDB Entry
www.elastic.co/community/securitynvdVendor Advisory

News mentions

0

No linked articles in our index yet.