CVE-2020-10743

4.3 mediumEPSS 0.7%

Medium (4.3). EPSS 0.7% chance of exploitation in the next 30 days.

It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP's distribution of Kibana, such as clickjacking.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWEs: CWE-358, CWE-1021
Published: 2021-06-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

elastic:kibana
redhat:openshift_container_platform

References

https://bugzilla.redhat.com/show_bug.cgi?id=1834550
https://bugzilla.redhat.com/show_bug.cgi?id=1834550

Check your stack JSON