# Kibana vulnerabilities > Kibana is made by Elastic. We track 80 published vulnerabilities listed under that exact name, across 472 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 10 January 2022. Elastic lists newer releases under their own names, such as Kibana X-Pack, so check those pages too. Canonical page: https://www.precursorintelligence.com/product/elastic/kibana ## At a glance - **Made by:** [Elastic](https://www.precursorintelligence.com/vendors/elastic) - **Published vulnerabilities:** 80 - **Known to be exploited:** 1 (listed under the name Kibana) - **Versions tracked:** 472 - **Most recently added to the known-exploited list:** [CVE-2019-7609](https://www.precursorintelligence.com/what-is/cve-2019-7609), 10 January 2022. We keep watching the list. ## Is Kibana listed under other names? Elastic also lists Kibana under more specific names, such as Kibana X-Pack and Kibana Reporting. Flaws listed only under those names are counted on their own pages, not here. - [Kibana X-Pack](https://www.precursorintelligence.com/product/elastic/kibana_x-pack): 2 published vulnerabilities - [Kibana Reporting](https://www.precursorintelligence.com/product/elastic/kibana_reporting): 1 published vulnerability ## Which versions of Kibana do the exploited flaws hit? Each exploited flaw lists the versions it affects, as published. "before 5.6.15" means every version up to, but not including, 5.6.15. - [CVE-2019-7609](https://www.precursorintelligence.com/what-is/cve-2019-7609) (Kibana Arbitrary Code Execution): before 5.6.15, 6.0.0 to before 6.6.1 ## Which Kibana vulnerabilities are being exploited? 1 flaw is on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2019-7609](https://www.precursorintelligence.com/what-is/cve-2019-7609): Kibana Arbitrary Code Execution. Critical, CVSS 10.0, chance of use in 30 days 95%, known exploited since 10 January 2022. ## Which Kibana flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2019-7609](https://www.precursorintelligence.com/what-is/cve-2019-7609): 95%, Critical (CVSS 10.0), known exploited - [CVE-2018-17246](https://www.precursorintelligence.com/what-is/cve-2018-17246): 82%, Critical (CVSS 9.8) - [CVE-2025-25014](https://www.precursorintelligence.com/what-is/cve-2025-25014): 22%, Critical (CVSS 9.1) - [CVE-2020-7012](https://www.precursorintelligence.com/what-is/cve-2020-7012): 18%, High (CVSS 8.8) - [CVE-2019-7610](https://www.precursorintelligence.com/what-is/cve-2019-7610): 3.9%, Critical (CVSS 9.0) - [CVE-2019-7616](https://www.precursorintelligence.com/what-is/cve-2019-7616): 2.4%, Medium (CVSS 4.9) - [CVE-2020-7013](https://www.precursorintelligence.com/what-is/cve-2020-7013): 2.1%, High (CVSS 7.2) - [CVE-2016-1000219](https://www.precursorintelligence.com/what-is/cve-2016-1000219): 2.0%, High (CVSS 7.5) - [CVE-2015-4093](https://www.precursorintelligence.com/what-is/cve-2015-4093): 2.0%, Medium (CVSS 4.3) - [CVE-2024-23443](https://www.precursorintelligence.com/what-is/cve-2024-23443): 1.8%, Medium (CVSS 4.9) ## Questions ### How many vulnerabilities does Kibana have? We track 80 published vulnerabilities listed under the name Kibana, across 472 versions. The most recent Kibana flaw added to the known-exploited list is CVE-2019-7609, on 10 January 2022. ### Which Kibana vulnerabilities are being exploited? 1 is on the list of flaws known to be exploited. The most recently added is CVE-2019-7609. ### Why are newer Kibana flaws missing from this page? Elastic also lists Kibana under more specific names, such as Kibana X-Pack and Kibana Reporting. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list. ### Which versions of Kibana do the exploited flaws affect? Each flaw names its own versions, usually as ranges. The newest, CVE-2019-7609, affects before 5.6.15, 6.0.0 to before 6.6.1. The versions for every exploited flaw are listed on this page. ### How do I get alerts for Kibana? Create a Precursor Intelligence account and track Kibana. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running Kibana? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact