# What are the Vulnerabilities of elk 7.17.3v?

**URL:** <https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421>\
**Category:** Elasticsearch\
**Created:** [August 19, 2022, 3:15am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421 "2022-08-19T03:15:35Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [August 19, 2022, 7:39am UTC](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421/5 "2022-08-19T07:39:02Z")

</div>

I am not aware of an list, but you can see what has been fixed in subsequent versions through the security announcements and release notes:

> [@Elastic Stack 7.17.4 and 8.2.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-17-4-and-8-2-1-security-update/305530):
>
> Elastic Stack update for CVE-2022-21449 Java vulnerability in Elliptic Curve Digital Signature Algorithm (ECDSA) (ESA-2022-06) A vulnerability (CVE-2022-21449) affecting the implementation of Elliptic Curve Digital Signing Algorithm (ECDSA) based signatures verification in Java JDK versions 15 and later was published on April 19, 2022. This vulnerability affects Oracle Java and OpenJDK, including other JDKs derived from OpenJDK. Affected Products and Versions Elasticsearch 6.8.x, 7.9.2 and l…

> [@Elastic 8.3.1, 8.3.0, and 7.17.5 Security Update](https://discuss.elastic.co/t/elastic-8-3-1-8-3-0-and-7-17-5-security-update/308613):
>
> Kibana cross-site-scripting (XSS) issue (ESA-2022-08) A cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration which could allow arbitrary JavaScript to be executed in a victim’s browser. Affected Versions: Versions 7.0.0 through 7.17.4 and 8.0.0 through 8.2.3 Solutions and Mitigations: The issue is fixed in versions 8.3.0 and 7.17.5. If you are unable to upgrade, you can select to disable Vega visualizations : For on premise installations, you can …

---

_[View the full topic](https://discuss.elastic.co/t/what-are-the-vulnerabilities-of-elk-7-17-3v/312421)._