CVE catalog

CVE-2018-12099

UBUNTU-CVE-2018-12099

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.11% · Oct 25, 2026

This update for grafana, kafka, logstash, openstack-monasca-installer fixes the following issues: Security issues fixed: - CVE-2018-12099: grafana: Fix XSS vulnerabilities in dashboard links (bsc#1096985). - CVE-2018-3817: logstash: Fix inadvertently logging of sensitive information (bsc#1090849). Bug fixes: - bsc#1095603: Disable jmxremote debugging. - bsc#1097847: Make time series database schema setup conditional. - bsc#1094448: Set log rotation options. - bsc#1090336: Add complete set of elasticsearch performance tunables. - bsc#1101366: Fix build issues with s390x, ppc64le and aarch64. - Fix various spec errors affecting Leap 15 and Tumbleweed

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Susegrafanahpe helion openstack 84.5.1-4.3.1fixed
Susekafkahpe helion openstack 80.9.0.1-5.3.1fixed
Suselogstashhpe helion openstack 82.4.1-5.4.1fixed
Suseopenstack-monasca-installerhpe helion openstack 820180622_15.06-3.6.1fixed
Susegrafanaopenstack cloud 84.5.1-4.3.1fixed
Susekafkaopenstack cloud 80.9.0.1-5.3.1fixed
Suselogstashopenstack cloud 82.4.1-5.4.1fixed
Suseopenstack-monasca-installeropenstack cloud 820180622_15.06-3.6.1fixed
Susegrafanaopenstack cloud crowbar 84.5.1-4.3.1fixed
Susekafkaopenstack cloud crowbar 80.9.0.1-5.3.1fixed
Suselogstashopenstack cloud crowbar 82.4.1-5.4.1fixed
Suseopenstack-monasca-installeropenstack cloud crowbar 820180622_15.06-3.6.1fixed
Susegrafanaopenstack cloud 74.5.1-1.8.1fixed
Susekafkaopenstack cloud 70.10.2.2-5.1fixed
Suselogstashopenstack cloud 72.4.1-5.1fixed
Susemonasca-installeropenstack cloud 720180608_12.47-9.1fixed
Ubuntugrafana16.042.6.0+dfsg-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Susegrafanarpmhpe helion openstack 84.5.1-4.3.1Not reportedSUSE-SU-2018:2317-1Not reported
Susekafkarpmhpe helion openstack 80.9.0.1-5.3.1Not reportedSUSE-SU-2018:2317-1Not reported
Suselogstashrpmhpe helion openstack 82.4.1-5.4.1Not reportedSUSE-SU-2018:2317-1Not reported
Suseopenstack-monasca-installerrpmhpe helion openstack 820180622_15.06-3.6.1Not reportedSUSE-SU-2018:2317-1Not reported
Susegrafanarpmopenstack cloud 84.5.1-4.3.1Not reportedSUSE-SU-2018:2317-1Not reported
Susekafkarpmopenstack cloud 80.9.0.1-5.3.1Not reportedSUSE-SU-2018:2317-1Not reported
Suselogstashrpmopenstack cloud 82.4.1-5.4.1Not reportedSUSE-SU-2018:2317-1Not reported
Suseopenstack-monasca-installerrpmopenstack cloud 820180622_15.06-3.6.1Not reportedSUSE-SU-2018:2317-1Not reported
Susegrafanarpmopenstack cloud crowbar 84.5.1-4.3.1Not reportedSUSE-SU-2018:2317-1Not reported
Susekafkarpmopenstack cloud crowbar 80.9.0.1-5.3.1Not reportedSUSE-SU-2018:2317-1Not reported
Suselogstashrpmopenstack cloud crowbar 82.4.1-5.4.1Not reportedSUSE-SU-2018:2317-1Not reported
Suseopenstack-monasca-installerrpmopenstack cloud crowbar 820180622_15.06-3.6.1Not reportedSUSE-SU-2018:2317-1Not reported
Susegrafanarpmopenstack cloud 74.5.1-1.8.1Not reportedSUSE-SU-2018:2536-1Not reported
Susekafkarpmopenstack cloud 70.10.2.2-5.1Not reportedSUSE-SU-2018:2536-1Not reported
Suselogstashrpmopenstack cloud 72.4.1-5.1Not reportedSUSE-SU-2018:2536-1Not reported
Susemonasca-installerrpmopenstack cloud 720180608_12.47-9.1Not reportedSUSE-SU-2018:2536-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]