What are the Vulnerabilities of elk 7.17.3v?

[Christian_Dahlqvist]

I am not aware of an list, but you can see what has been fixed in subsequent versions through the security announcements and release notes:

Elastic Stack 7.17.4 and 8.2.1 Security Update

Elastic Stack update for CVE-2022-21449 Java vulnerability in Elliptic Curve Digital Signature Algorithm (ECDSA) (ESA-2022-06) A vulnerability (CVE-2022-21449) affecting the implementation of Elliptic Curve Digital Signing Algorithm (ECDSA) based signatures verification in Java JDK versions 15 and later was published on April 19, 2022. This vulnerability affects Oracle Java and OpenJDK, including other JDKs derived from OpenJDK. Affected Products and Versions Elasticsearch 6.8.x, 7.9.2 and l…

Elastic 8.3.1, 8.3.0, and 7.17.5 Security Update

Kibana cross-site-scripting (XSS) issue (ESA-2022-08) A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser. Affected Versions: Versions 7.0.0 through 7.17.4 and 8.0.0 through 8.2.3 Solutions and Mitigations: The issue is fixed in versions 8.3.0 and 7.17.5. If you are unable to upgrade, you can select to disable Vega visualizations : For on premise installations, you can …