CVE-2017-11479

Published: Sep 29, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

Affected (22)

Products: Elastic: Kibana · Elasticsearch: Kibana

1 product

1 product

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Elastic Kibana	Version 5.0.0
Elastic Kibana	Version 5.0.1
Elastic Kibana	Version 5.0.2
Elastic Kibana	Version 5.1.1
Elastic Kibana	Version 5.1.2
Elastic Kibana	Version 5.2.0
Elastic Kibana	Version 5.2.1
Elastic Kibana	Version 5.2.2
Elastic Kibana	Version 5.3.0
Elastic Kibana	Version 5.3.1
Elastic Kibana	Version 5.3.2
Elastic Kibana	Version 5.3.3
Elastic Kibana	Version 5.4.0
Elastic Kibana	Version 5.4.1
Elastic Kibana	Version 5.4.2
Elastic Kibana	Version 5.4.3
Elastic Kibana	Version 5.5.0
Elastic Kibana	Version 5.5.1
Elastic Kibana	Version 5.5.2
Elastic Kibana	Version 5.5.3
Elastic Kibana	Version 5.6.0
Elasticsearch Kibana	Version 5.1.0