Vulnerabilities > Elastic > Elasticsearch X Pack > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-09-19 CVE-2018-3824 Cross-site Scripting vulnerability in Elastic Elasticsearch X-Pack and Kibana X-Pack
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability.
network
low complexity
elastic CWE-79
6.1
2018-09-19 CVE-2018-3823 Cross-site Scripting vulnerability in Elastic Elasticsearch X-Pack and Kibana X-Pack
X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability.
network
low complexity
elastic CWE-79
5.4