Security
فارسی
All products

Red Hat OpenShift Container Platform 3.11/openshift3/ose-logging-kibana5

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Vega has Cross-site Scripting vulnerability in `lassoAppend` functionCVE-2023-26487 · GHSA-W5M3-XH75-MP55 vega-functionsvega npmRed Hat Medium Fix reported
Vega Expression Language `scale` expression function Cross Site ScriptingCVE-2023-26486 · GHSA-4VQ7-882G-WCG4 vega-functionsvega npmRed Hat Medium Fix reported
Prototype Pollution in lodashCVE-2019-10744 · GHSA-JF85-CPCP-J695 lodash-amdlodash-es npmRed HatRubyGems Critical Fix reported
Kibana: Cross-site scripting issue (ESA-2022-01)CVE-2022-23707 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: cross-site-scripting (XSS) issue (ESA-2022-04)CVE-2022-23710 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: missing authorization issue (ESA-2022-03)CVE-2022-23709 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: Kibana cross-site-scripting (XSS) issue (ESA-2022-08)CVE-2022-23713 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Red Hat Medium No fix reported
kibana: HTML injection issue (ESA-2021-23)CVE-2021-37936 Red Hat JBoss Fuse 6/kibanaRed Hat JBoss Fuse Service Works 6/kibana Red Hat Medium No fix reported
kibana: Kibana open redirect issue (ESA-2023-03)CVE-2022-38779 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Red Hat Medium No fix reported
kibana: Kibana authenticated Denial of Service issue (ESA-2023-02)CVE-2022-38778 Red Hat JBoss Fuse 6/kibanaRed Hat JBoss Fuse Service Works 6/kibana Red Hat Medium No fix reported
kibana: Insertion of Sensitive Information into Log File (ESA-2023-25)CVE-2023-46671 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: read-only alerting users using the run_soon API making the alerting rule run continuouslyCVE-2024-37279 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operator Red Hat Medium No fix reported