CVEvulnerability

CVE-2020-7017

6.7 MEDIUM Published 2020-07-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:N/AC:H/Au:S/C:P/I:P/A:P
Weaknesses
CWE-79

Description

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive information or perform destructive actions on behalf of Kibana users who view the region map visualization.

Affected configurations

• elasticsearch kibana (< 6.8.11) • elasticsearch kibana (>= 7.0.0 < 7.8.1) • oracle communications billing and revenue management 12.0.0.3.0 • oracle communications cloud native core network function cloud native environment 1.7.0 • oracle peoplesoft enterprise peopletools 8.58

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References