VDB
CVE-2025-37732
CVE-2025-37732
PUBLISHED
CVSS 5.400000095367432 MEDIUM
Kibana Cross-site Scripting via the Integration Package Upload Functionality
EPSS 0.18% · 7.7th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.18%
7.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | elk | 0, 9.0.0, 9.2.0 |
| Bitnami | kibana | 0, 9.0.0, 9.2.0 |
| Bitnami | elk | 9.0.0, 9.2.0, 0 |
Timeline
- Dec 14, 2025 CVE Published
- Dec 15, 2025 EPSS Score
- Dec 15, 2025 CVE Updated
- Dec 19, 2025 EPSS Score
- Dec 24, 2025 EPSS Score
- Dec 28, 2025 EPSS Score
- Jan 2, 2026 EPSS Score
- Jan 6, 2026 EPSS Score
- Jan 10, 2026 EPSS Score
- Jan 15, 2026 EPSS Score
- Jan 19, 2026 EPSS Score
- Jan 24, 2026 EPSS Score