{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T22:25:53.732","vulnerabilities":[{"cve":{"id":"CVE-2022-23707","sourceIdentifier":"security@elastic.co","published":"2022-02-11T18:15:11.797","lastModified":"2026-06-17T04:30:40.577","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index pattern which could execute against other users"},{"lang":"es","value":"Se encontró una vulnerabilidad de tipo XSS en los patrones de índice de Kibana. Usando esta vulnerabilidad, un usuario autenticado con permisos para crear patrones de índice puede inyectar javascript malicioso en el patrón de índice que podría ejecutarse contra otros usuarios"}],"affected":[{"source":"security@elastic.co","affectedData":[{"vendor":"Elastic","product":"Kibana","versions":[{"version":"7.5.1 through 7.16.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"security@elastic.co","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:*","versionStartIncluding":"7.5.1","versionEndExcluding":"7.17.0","matchCriteriaId":"25C019D9-EB78-4E90-B756-6EB990CF0EAE"}]}]}],"references":[{"url":"https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215","source":"security@elastic.co","tags":["Patch","Vendor Advisory"]},{"url":"https://discuss.elastic.co/t/kibana-7-17-0-security-update/296215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}}]}