Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-06-05	CVE-2017-8439	Cross-site Scripting vulnerability in Elastic Kibana 5.4.0 Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. network elastic CWE-79	4.3
2015-12-07	CVE-2015-8131	Cross-Site Request Forgery (CSRF) vulnerability in Elastic Kibana Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. network elastic CWE-352	6.8
2015-06-15	CVE-2015-4093	Cross-site Scripting vulnerability in Elastic Kibana 4.0.0/4.0.1/4.0.2 Cross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. network elastic CWE-79	4.3