CVE-2020-7017
27.07.2020, 18:15
In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.
| Vendor | Product | Version |
|---|---|---|
| elasticsearch | kibana | 𝑥 < 6.8.11 |
| elasticsearch | kibana | 7.0.0 ≤ 𝑥 < 7.8.1 |
| oracle | communications_billing_and_revenue_management | 12.0.0.3.0 |
| oracle | communications_cloud_native_core_network_function_cloud_native_environment | 1.7.0 |
| oracle | peoplesoft_enterprise_peopletools | 8.58 |
𝑥
= Vulnerable software versions
References