CVE:CVE-2020-7016
CNNVD:CNNVD-202007-1547
Elasticsearch Kibana是荷兰Elasticsearch公司的一套开源的、基于浏览器的分析和搜索Elasticsearch仪表板工具。
Elasticsearch Kibana 6.8.11之前版本和7.8.1之前版本中存在安全漏洞。攻击者可借助特制URL利用该漏洞导致Kibana进程消耗大量CPU（拒绝服务）。
solution:Upgrade elasticsearch kibana to a higher version than 6.8.11,7.8.1,and avoid the version (,6.8.11),[7.0.0,7.8.1); Upgrade oracle communications_billing_and_revenue_management to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.7.0,and avoid the version 1.7.0; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,and avoid the version 8.58