{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T02:45:36.357","vulnerabilities":[{"cve":{"id":"CVE-2024-37281","sourceIdentifier":"security@elastic.co","published":"2024-07-30T22:15:01.923","lastModified":"2026-06-17T07:38:04.090","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a large number of maliciously crafted requests to a specific endpoint."},{"lang":"es","value":"Se descubrió un problema en Kibana donde un usuario con rol de Observador podía provocar que una instancia de Kibana fallara al enviar una gran cantidad de solicitudes manipuladas con fines malintencionados a un endpoint específico."}],"affected":[{"source":"security@elastic.co","affectedData":[{"vendor":"Elastic","product":"Kibana","defaultStatus":"unaffected","versions":[{"version":"7.x","lessThan":"7.17.23","versionType":"custom","status":"affected"},{"version":"8.x","lessThan":"8.14.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@elastic.co","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-07-31T13:30:57.400309Z","id":"CVE-2024-37281","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@elastic.co","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0.0","versionEndExcluding":"7.17.23","matchCriteriaId":"F046131E-0B68-44B3-8E3A-F85FFFAB73E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndExcluding":"8.14.0","matchCriteriaId":"3F1EDB3A-548A-4F37-BE27-47D23FF88908"}]}]}],"references":[{"url":"https://discuss.elastic.co/t/kibana-7-17-23-8-14-0-security-update-esa-2024-16/364094","source":"security@elastic.co","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://discuss.elastic.co/t/kibana-7-17-23-8-14-0-security-update-esa-2024-16/364094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]}]}}]}