CVE:CVE-2020-7017
CNNVD:CNNVD-202007-1549
Elastic Kibana是荷兰Elastic公司的一个应用系统。一个免费且开放的用户界面，能够让您对 Elasticsearch 数据进行可视化，并让您在 Elastic Stack 中进行导航。
Elastic Kibana 6.8.11之前版本和7.8.1之前版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade elasticsearch kibana to a higher version than 6.8.11,7.8.1,and avoid the version (,6.8.11),[7.0.0,7.8.1); Upgrade oracle communications_billing_and_revenue_management to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.7.0,and avoid the version 1.7.0; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,and avoid the version 8.58