# What are the Vulnerabilities of elk 7.17.3v? **URL:** \ **Category:** Elasticsearch\ **Created:** [August 19, 2022, 3:15am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421 "2022-08-19T03:15:35Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![jisha](https://avatars.discourse-cdn.com/v4/letter/j/49beb7/32.png) [@jisha](https://discuss.elastic.co/u/jisha)\ **Post date:** [August 19, 2022, 3:15am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421/1 "2022-08-19T03:15:35Z")
what are the Vulnerabilities of elk 7.17.3v ? what are the Solutions to fix those vulnerabilities? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [August 19, 2022, 4:33am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421/2 "2022-08-19T04:33:42Z")
> [@jisha](#): > > what are the Solutions to fix those vulnerabilities? Upgrade is always the answer, as we do not backport any security fixes. ---
**Author:** ![jisha](https://avatars.discourse-cdn.com/v4/letter/j/49beb7/32.png) [@jisha](https://discuss.elastic.co/u/jisha)\ **Post date:** [August 19, 2022, 4:35am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421/3 "2022-08-19T04:35:07Z")
I need the Vulnerabilities details of elk 7.17.3v ---
**Author:** ![jisha](https://avatars.discourse-cdn.com/v4/letter/j/49beb7/32.png) [@jisha](https://discuss.elastic.co/u/jisha)\ **Post date:** [August 19, 2022, 4:50am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421/4 "2022-08-19T04:50:49Z")
How to check the Vulnerabilities of elk 7.17.3v? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [August 19, 2022, 7:39am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421/5 "2022-08-19T07:39:02Z")
I am not aware of an list, but you can see what has been fixed in subsequent versions through the security announcements and release notes: > [@Elastic Stack 7.17.4 and 8.2.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530): > > Elastic Stack update for CVE-2022-21449 Java vulnerability in Elliptic Curve Digital Signature Algorithm (ECDSA) (ESA-2022-06) A vulnerability (CVE-2022-21449) affecting the implementation of Elliptic Curve Digital Signing Algorithm (ECDSA) based signatures verification in Java JDK versions 15 and later was published on April 19, 2022. This vulnerability affects Oracle Java and OpenJDK, including other JDKs derived from OpenJDK. Affected Products and Versions Elasticsearch 6.8.x, 7.9.2 and l… > [@Elastic 8.3.1, 8.3.0, and 7.17.5 Security Update](https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613): > > Kibana cross-site-scripting (XSS) issue (ESA-2022-08) A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser. Affected Versions: Versions 7.0.0 through 7.17.4 and 8.0.0 through 8.2.3 Solutions and Mitigations: The issue is fixed in versions 8.3.0 and 7.17.5. If you are unable to upgrade, you can select to disable Vega visualizations : For on premise installations, you can … ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [September 16, 2022, 7:39am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421/6 "2022-09-16T07:39:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.