A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview...

6.1 CVSS

Vulnerability Description

A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which could allow arbitrary JavaScript to be executed in a victim’s browser.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-23710

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Elastic

View All →

CVE-2025-68422

Kibana Improper Authorization

Medium 4.3

CVE-2025-68390

Elasticsearch Allocation of Resources Without Limits or Throttling

Medium 4.9

CVE-2025-68389

Kibana Allocation of Resources Without Limits or Throttling

Medium 6.5

CVE-2025-68388

Allocation of resources without limits or throttling (CWE-770) allows an...

Medium 5.3

CVE-2025-68387

Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Medium 6.1

Affected Vendor

Elastic

View all reports →

Affected Software

kibana

Vulnerable Versions:

For self-managed deployments the issue impacts versions 7.15.0, 7.15.1, and 7.15.2 For Elastic Cloud Services the issue impacts versions 7.15.0 through 7.17.0, and 8.0.0