CVE-2024-43707

6.5 mediumEPSS 0.4%

Medium (6.5) in elastic kibana. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was identified in Kibana where a user without access to Fleet can view Elastic Agent policies that could contain sensitive information. The nature of the sensitive information depends on the integrations enabled for the Elastic Agent and their respective versions.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2025-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

elastic:kibana

References

https://discuss.elastic.co/t/kibana-8-15-0-security-update-esa-2024-29-esa-2024-30/373521

Check your stack JSON