Vulnerability Details CVE-2022-23710
A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.9%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2022-23710
-
cpe:2.3:a:elastic:kibana:7.15.0
-
cpe:2.3:a:elastic:kibana:7.15.1
-
cpe:2.3:a:elastic:kibana:7.15.2
-
cpe:2.3:a:elastic:kibana:7.16.0
-
cpe:2.3:a:elastic:kibana:7.16.1
-
cpe:2.3:a:elastic:kibana:7.16.2
-
cpe:2.3:a:elastic:kibana:7.16.3
-
cpe:2.3:a:elastic:kibana:7.17.0
-
cpe:2.3:a:elastic:kibana:8.0.0