| Package | Affected versions | Patched versions |
|---|---|---|
| kibana | ≥ 7.0.0, < 7.8.1< 6.8.11 | 7.8.16.8.11 |
| communications billing and revenue management | = 12.0.0.3.0 | |
| communications cloud native core network function cloud native environment | = 1.7.0 | |
| peoplesoft enterprise peopletools | = 8.58 |
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming large amounts of CPU and becoming unresponsive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free