CVE-2022-23710: Elastic Kibana

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.

Affected products

• Elastic Kibana: from 7.15.0, up to and including 7.17.0; version 8.0.0 only

Published 2022-03-03. Last modified 2026-06-17.