High severity8.7NVD Advisory· Published Oct 10, 2025· Updated Jun 17, 2026
CVE-2025-25018
CVE-2025-25018
Description
Improper Neutralization of Input During Web Page Generation in Kibana can lead to stored Cross-Site Scripting (XSS)
Affected products
8- osv-coords5 versionspkg:apk/chainguard/kibana-8.17-bitnamipkg:apk/chainguard/kibana-8.18-bitnamipkg:apk/chainguard/kibana-8.19-bitnamipkg:bitnami/elkpkg:bitnami/kibana
< 8.17.10-r11+ 4 more
- (no CPE)range: < 8.17.10-r11
- (no CPE)range: < 8.18.8-r10
- (no CPE)range: < 8.19.11-r0
- (no CPE)range: < 8.18.8
- (no CPE)range: < 8.18.8
Patches
Vulnerability mechanics
References
1- https//discuss.elastic.co/t/kibana-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-17/382451nvdBroken LinkVendor Advisory
News mentions
0No linked articles in our index yet.