Kibana 7.15.0 < 7.17.1 Multiple Vulnerabilities

2023-01-1100:00:00

www.tenable.com

kibana

vulnerabilities

scanner

0.001 Low

EPSS

Percentile

33.6%

JSON

According to its self-reported version number, the Kibana application running on the remote host is 7.15.x prior to 7.17.1. It is, therefore, affected by :

Privilege Escalation when upgrading from version 6.x to 7.x would disable the in-built protections on the security index (CVE-2022-23708)
Cross-Site Scripting in the Data Preview Pane (CVE-2022-23710)

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.

No source data

VendorProductVersionCPE
elasticsearchkibana*cpe:2.3:a:elasticsearch:kibana:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
elasticsearch	kibana	*	cpe:2.3:a:elasticsearch:kibana::::::::

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23708

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23710

discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447

www.elastic.co/community/security

0.001 Low

EPSS

Percentile

33.6%

JSON

Related for WEB_APPLICATION_SCANNING_113519