VDB
CVE-2025-68385
CVE-2025-68385
PUBLISHED
CVSS 6.099999904632568 MEDIUM
Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS 0.25% · 16.7th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.25%
16.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | elk | 9.0.0, 9.2.0, 0 |
| Bitnami | kibana | 0, 9.0.0, 9.2.0 |
| Bitnami | elk | 9.0.0, 9.2.0, 0 |
Timeline
- Dec 18, 2025 CVE Published
- Dec 19, 2025 EPSS Score
- Dec 23, 2025 EPSS Score
- Dec 28, 2025 EPSS Score
- Jan 1, 2026 EPSS Score
- Jan 6, 2026 EPSS Score
- Jan 10, 2026 EPSS Score
- Jan 15, 2026 EPSS Score
- Jan 19, 2026 EPSS Score
- Jan 24, 2026 EPSS Score
- Jan 28, 2026 EPSS Score
- Feb 1, 2026 EPSS Score