Vulnerabilities > Elastic > Kibana > Critical

DATE CVE VULNERABILITY TITLE RISK
2019-03-25 CVE-2019-7609 Code Injection vulnerability in multiple products
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.
network
low complexity
elastic redhat CWE-94
critical
 10.0
10
2019-03-25 CVE-2019-7610 Command Injection vulnerability in Elastic Kibana
Kibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit logger.
network
elastic CWE-77
critical
 9.3
9.3