Vulnerabilities > Elastic > Elasticsearch X Pack > 5.3.2

DATE CVE VULNERABILITY TITLE RISK
2018-09-19 CVE-2018-3824 Cross-site Scripting vulnerability in Elastic products
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability.
network
elastic CWE-79
4.3
2018-09-19 CVE-2018-3823 Cross-site Scripting vulnerability in Elastic Elasticsearch X-Pack and Kibana X-Pack
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability.
network
low complexity
elastic CWE-79
5.4