Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-23710

A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2022-23710
  • Elastic » Kibana » Version: 7.15.0
    cpe:2.3:a:elastic:kibana:7.15.0
  • Elastic » Kibana » Version: 7.15.1
    cpe:2.3:a:elastic:kibana:7.15.1
  • Elastic » Kibana » Version: 7.15.2
    cpe:2.3:a:elastic:kibana:7.15.2
  • Elastic » Kibana » Version: 7.16.0
    cpe:2.3:a:elastic:kibana:7.16.0
  • Elastic » Kibana » Version: 7.16.1
    cpe:2.3:a:elastic:kibana:7.16.1
  • Elastic » Kibana » Version: 7.16.2
    cpe:2.3:a:elastic:kibana:7.16.2
  • Elastic » Kibana » Version: 7.16.3
    cpe:2.3:a:elastic:kibana:7.16.3
  • Elastic » Kibana » Version: 7.17.0
    cpe:2.3:a:elastic:kibana:7.17.0
  • Elastic » Kibana » Version: 8.0.0
    cpe:2.3:a:elastic:kibana:8.0.0


Contact Us

Shodan ® - All rights reserved