CVE-2017-8439: Elastic Kibana

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. This bug could allow an attacker to obtain sensitive information from Kibana users.

Affected products

• Elastic Kibana: version 5.4.0 only

Published 2017-06-05. Last modified 2026-06-17.