Unrated severityNVD Advisory· Published Mar 25, 2019· Updated Aug 4, 2024

CVE-2019-7608

Description

Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elastic/Kibanallm-fuzzy2 versions
<5.6.15 or >=5.6.1? <6.6.1+ 1 more
- (no CPE)range: <5.6.15 or >=5.6.1? <6.6.1
- (no CPE)range: before 5.6.15 and 6.6.1

Patches

Vulnerability mechanics

References

access.redhat.com/errata/RHBA-2019:2824mitrevendor-advisoryx_refsource_REDHAT
access.redhat.com/errata/RHSA-2019:2860mitrevendor-advisoryx_refsource_REDHAT
discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077mitrex_refsource_MISC
www.elastic.co/community/securitymitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000