All products

Red Hat OpenShift Container Platform 4/openshift4/ose-logging-kibana6

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Command Injection in lodashCVE-2021-23337 · GHSA-35JH-R3H4-6JHM lodash-eslodash-template npmRed HatRubyGems High Fix reported
XSS in VegaCVE-2020-26296 · GHSA-R2QC-W64X-6J54 vegaRed Hat OpenShift Container Platform 4/openshift4/ose-logging-kibana6 npmRed Hat Low Fix reported
Angular vulnerable to Cross-site ScriptingCVE-2020-7676 · GHSA-MHP6-PXH8-R675 angularOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat Medium Fix reported
Prototype Pollution in lodashCVE-2018-16487 · GHSA-4XC9-XHRJ-V574 lodashLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed HatRubyGems High Fix reported
Regular Expression Denial of Service in postcssCVE-2021-23368 · GHSA-HWJ9-H5MP-3PM3 postcssLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Medium Fix reported
Regular Expression Denial of Service in ua-parser-jsCVE-2020-7733 · GHSA-662X-FHQG-9P8V ua-parser-jsDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel7 npmRed Hat High Fix reported
Regular Expression Denial of Service in postcssCVE-2021-23382 · GHSA-566M-QJ78-RWW5 postcssLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Medium Fix reported
ua-parser-js Regular Expression Denial of Service vulnerabilityCVE-2020-7793 · GHSA-394C-5J6W-4XMX ua-parser-jsDistributed Tracing Jaeger 1/distributed-tracing/jaeger-all-in-one-rhel7 npmRed Hat High Fix reported
Validation Bypass in kind-ofCVE-2019-20149 · GHSA-6C8F-QPHG-QJGP kind-ofLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Regular Expression Denial of Service (ReDOS)CVE-2021-29060 · GHSA-257V-VJ4P-3W2H color-stringOpenShift Service Mesh 1/servicemesh-grafana npmRed Hat Medium Fix reported
Regular Expression Denial of Service (ReDoS) in ua-parser-jsCVE-2021-27292 · GHSA-78CJ-FXPH-M83P ua-parser-jsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat High Fix reported
kibana: stored XSS in region map visualizationCVE-2020-7017 Red Hat OpenShift Container Platform 3.11/kibanaRed Hat OpenShift Container Platform 4/kibana Red Hat Medium No fix reported
kibana: DoS in TimelionCVE-2020-7016 Red Hat OpenShift Container Platform 3.11/kibanaRed Hat OpenShift Container Platform 4/kibana Red Hat Low No fix reported
kibana: URL redirection flawCVE-2021-22141 Logging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8Red Hat OpenShift Container Platform 3.11/kibana Red Hat Low No fix reported
Kibana: Cross-site scripting issue (ESA-2022-01)CVE-2022-23707 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: cross-site-scripting (XSS) issue (ESA-2022-04)CVE-2022-23710 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported
kibana: missing authorization issue (ESA-2022-03)CVE-2022-23709 Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-rhel8-operatorLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 Red Hat Medium No fix reported