CVE-2017-11481
Fixed in a distro release EPSS <1%
Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
Products: Elastic Kibana
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE HPE Helion OpenStack 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 |
| SUSE HPE Helion OpenStack 8 | cassandra | 3.11.10-5.3.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-installation | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-operations | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-opsconsole | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-planning | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-security | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | documentation-hpe-helion-openstack-user | 8.20210512-1.32.5 |
| SUSE HPE Helion OpenStack 8 | grafana | 6.7.4-4.18.2 |
| SUSE HPE Helion OpenStack 8 | kibana | 4.6.6-3.9.2 |
| SUSE HPE Helion OpenStack 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 |
| SUSE HPE Helion OpenStack 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 |
| SUSE HPE Helion OpenStack 8 | openstack-nova | 16.1.9~dev92-3.48.5 |
| SUSE HPE Helion OpenStack 8 | openstack-nova-doc | 16.1.9~dev92-3.48.5 |
| SUSE HPE Helion OpenStack 8 | python-Django | 1.11.29-3.25.3 |
| SUSE HPE Helion OpenStack 8 | python-elementpath | 1.3.1-1.3.2 |
| SUSE HPE Helion OpenStack 8 | python-eventlet | 0.20.0-6.3.3 |
| SUSE HPE Helion OpenStack 8 | python-py | 1.4.34-3.3.3 |
| SUSE HPE Helion OpenStack 8 | python-pysaml2 | 4.0.2-5.9.2 |
| SUSE HPE Helion OpenStack 8 | python-xmlschema | 1.0.18-1.3.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-horizon-hpe | 12.0.5~dev6-14.36.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 |
| SUSE HPE Helion OpenStack 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 |
| SUSE OpenStack Cloud 7 | crowbar-openstack | 4.0+git.1616146720.44daffca0-9.81.2 |
| SUSE OpenStack Cloud 7 | grafana | 6.7.4-1.24.2 |
| SUSE OpenStack Cloud 7 | kibana | 4.6.6-9.2 |
| SUSE OpenStack Cloud 7 | monasca-installer | 20180608_12.47-16.2 |
| SUSE OpenStack Cloud 7 | python-Django | 1.8.19-3.29.1 |
| SUSE OpenStack Cloud 7 | python-py | 1.8.1-11.16.2 |
| SUSE OpenStack Cloud 7 | rubygem-activerecord-session_store | 0.1.2-3.4.2 |
| SUSE OpenStack Cloud 8 | ardana-cobbler | 8.0+git.1614096566.e8c2b27-3.44.3 |
| SUSE OpenStack Cloud 8 | cassandra | 3.11.10-5.3.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-installation | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-operations | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-opsconsole | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-planning | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-security | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-supplement | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-upstream-user | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | documentation-suse-openstack-cloud-user | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud 8 | grafana | 6.7.4-4.18.2 |
| SUSE OpenStack Cloud 8 | kibana | 4.6.6-3.9.2 |
| SUSE OpenStack Cloud 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 |
| SUSE OpenStack Cloud 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 |
| SUSE OpenStack Cloud 8 | openstack-nova | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud 8 | openstack-nova-doc | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud 8 | python-Django | 1.11.29-3.25.3 |
| SUSE OpenStack Cloud 8 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud 8 | python-eventlet | 0.20.0-6.3.3 |
| SUSE OpenStack Cloud 8 | python-py | 1.4.34-3.3.3 |
| SUSE OpenStack Cloud 8 | python-pysaml2 | 4.0.2-5.9.2 |
| SUSE OpenStack Cloud 8 | python-xmlschema | 1.0.18-1.3.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-aodh | 5.1.1~dev7-12.32.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-barbican | 5.0.2~dev3-12.33.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-ceilometer | 9.0.8~dev7-12.30.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-cinder | 11.2.3~dev29-14.34.2 |
| SUSE OpenStack Cloud 8 | venv-openstack-designate | 5.0.3~dev7-12.31.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-freezer | 5.0.0.0~xrc2~dev2-10.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-glance | 15.0.3~dev3-12.31.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-heat | 9.0.8~dev22-12.33.2 |
| SUSE OpenStack Cloud 8 | venv-openstack-horizon | 12.0.5~dev6-14.36.6 |
| SUSE OpenStack Cloud 8 | venv-openstack-ironic | 9.1.8~dev8-12.33.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-keystone | 12.0.4~dev11-11.35.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-magnum | 5.0.2_5.0.2_5.0.2~dev31-11.32.2 |
| SUSE OpenStack Cloud 8 | venv-openstack-manila | 5.1.1~dev5-12.37.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca | 2.2.2~dev1-11.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-monasca-ceilometer | 1.5.1_1.5.1_1.5.1~dev3-8.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-murano | 4.0.2~dev2-12.28.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-neutron | 11.0.9~dev69-13.38.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-nova | 16.1.9~dev92-11.36.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-octavia | 1.0.6~dev3-12.33.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-sahara | 7.0.5~dev4-11.32.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-swift | 2.15.2_2.15.2_2.15.2~dev32-11.23.3 |
| SUSE OpenStack Cloud 8 | venv-openstack-trove | 8.0.2~dev2-11.32.3 |
| SUSE OpenStack Cloud 9 | ardana-neutron | 9.0+git.1615223676.777f0b3-3.25.2 |
| SUSE OpenStack Cloud 9 | ardana-swift | 9.0+git.1618235096.90974ed-3.10.2 |
| SUSE OpenStack Cloud 9 | cassandra | 3.11.10-3.3.3 |
| SUSE OpenStack Cloud 9 | grafana | 6.7.4-3.23.2 |
| SUSE OpenStack Cloud 9 | kibana | 4.6.6-4.9.2 |
| SUSE OpenStack Cloud 9 | openstack-dashboard | 14.1.1~dev11-3.24.6 |
| SUSE OpenStack Cloud 9 | openstack-ironic | 11.1.5~dev17-3.25.5 |
| SUSE OpenStack Cloud 9 | openstack-neutron | 13.0.8~dev164-3.37.4 |
| SUSE OpenStack Cloud 9 | openstack-neutron-gbp | 12.0.1~dev29-3.25.3 |
| SUSE OpenStack Cloud 9 | openstack-nova | 18.3.1~dev82-3.37.6 |
| SUSE OpenStack Cloud 9 | python-Django1 | 1.11.29-3.25.1 |
| SUSE OpenStack Cloud 9 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud 9 | python-py | 1.5.4-3.3.2 |
| SUSE OpenStack Cloud 9 | python-pysaml2 | 4.5.0-4.6.2 |
| SUSE OpenStack Cloud 9 | python-xmlschema | 1.0.18-1.3.2 |
| SUSE OpenStack Cloud 9 | venv-openstack-barbican | 7.0.1~dev24-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-cinder | 13.0.10~dev20-3.26.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-designate | 7.0.2~dev2-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-glance | 17.0.1~dev30-3.21.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-heat | 11.0.4~dev4-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-horizon | 14.1.1~dev11-4.27.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-ironic | 11.1.5~dev17-4.21.2 |
| SUSE OpenStack Cloud 9 | venv-openstack-keystone | 14.2.1~dev4-3.24.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-magnum | 7.2.1~dev1-4.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-manila | 7.4.2~dev60-3.29.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca | 2.7.1~dev10-3.21.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-monasca-ceilometer | 1.8.2~dev3-3.23.2 |
| SUSE OpenStack Cloud 9 | venv-openstack-neutron | 13.0.8~dev164-6.27.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-nova | 18.3.1~dev82-3.27.3 |
| SUSE OpenStack Cloud 9 | venv-openstack-octavia | 3.2.3~dev7-4.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-sahara | 9.0.2~dev15-3.23.1 |
| SUSE OpenStack Cloud 9 | venv-openstack-swift | 2.19.2~dev48-2.18.1 |
| SUSE OpenStack Cloud Crowbar 8 | cassandra | 3.11.10-5.3.5 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-core | 5.0+git.1622489449.a8e60e238-3.50.4 |
| SUSE OpenStack Cloud Crowbar 8 | crowbar-openstack | 5.0+git.1616001417.67fd9c2a1-4.52.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-deployment | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-supplement | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-admin | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | documentation-suse-openstack-cloud-upstream-user | 8.20210512-1.32.5 |
| SUSE OpenStack Cloud Crowbar 8 | grafana | 6.7.4-4.18.2 |
| SUSE OpenStack Cloud Crowbar 8 | kibana | 4.6.6-3.9.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-heat-templates | 0.0.0+git.1623056900.7917e18-3.21.3 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-monasca-installer | 20190923_16.32-3.18.2 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud Crowbar 8 | openstack-nova-doc | 16.1.9~dev92-3.48.5 |
| SUSE OpenStack Cloud Crowbar 8 | python-Django | 1.11.29-3.25.3 |
| SUSE OpenStack Cloud Crowbar 8 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-eventlet | 0.20.0-6.3.3 |
| SUSE OpenStack Cloud Crowbar 8 | python-py | 1.4.34-3.3.3 |
| SUSE OpenStack Cloud Crowbar 8 | python-pysaml2 | 4.0.2-5.9.2 |
| SUSE OpenStack Cloud Crowbar 8 | python-xmlschema | 1.0.18-1.3.3 |
| SUSE OpenStack Cloud Crowbar 8 | rubygem-activerecord-session_store | 0.1.2-3.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | cassandra | 3.11.10-3.3.3 |
| SUSE OpenStack Cloud Crowbar 9 | crowbar-openstack | 6.0+git.1616146717.a89ae0f4e-3.34.4 |
| SUSE OpenStack Cloud Crowbar 9 | grafana | 6.7.4-3.23.2 |
| SUSE OpenStack Cloud Crowbar 9 | kibana | 4.6.6-4.9.2 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-dashboard | 14.1.1~dev11-3.24.6 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-ironic | 11.1.5~dev17-3.25.5 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron | 13.0.8~dev164-3.37.4 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-neutron-gbp | 12.0.1~dev29-3.25.3 |
| SUSE OpenStack Cloud Crowbar 9 | openstack-nova | 18.3.1~dev82-3.37.6 |
| SUSE OpenStack Cloud Crowbar 9 | python-Django1 | 1.11.29-3.25.1 |
| SUSE OpenStack Cloud Crowbar 9 | python-elementpath | 1.3.1-1.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | python-py | 1.5.4-3.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | python-pysaml2 | 4.5.0-4.6.2 |
| SUSE OpenStack Cloud Crowbar 9 | python-xmlschema | 1.0.18-1.3.2 |
| SUSE OpenStack Cloud Crowbar 9 | rubygem-activerecord-session_store | 0.1.2-4.3.2 |