Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-43706

No fix known EPSS <1%CVSS 7.6

Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.

Published 2025-06-10 · CVE record · OSV

Products: Elastic Kibana