Elastic Logstash vulnerabilities

• elastic logstash Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write CVE-2026-33466 Fix available 8.1 HighApril 8, 2026
• elastic logstash Logstash Improper Certificate Validation in TCP output CVE-2025-37730 Fix available 6.5 MediumMay 6, 2025
• elastic logstash Logstash Insertion of Sensitive Information into Log File CVE-2023-46672 Fix available 8.4 HighNovember 15, 2023
• elastic logstash, elasticsearch +1 more In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw... CVE-2021-22138 Fix available 3.7 LowMay 13, 2021
• elastic logstash Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats... CVE-2019-7620 7.5 HighOctober 30, 2019
• elastic winlogbeat, logstash +1 more Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to... CVE-2019-7613 7.5 HighMarch 25, 2019
• elastic logstash, netapp active iq performance analytics services +1 more A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1... CVE-2019-7612 9.8 CriticalMarch 25, 2019
• elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 more Elasticsearch subject to cross site scripting CVE-2018-3824 Fix available 6.1 MediumSeptember 19, 2018
• elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 more X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS)... CVE-2018-3823 5.4 MediumSeptember 19, 2018
• elastic logstash When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2... CVE-2018-3817 6.5 MediumMarch 30, 2018
• elastic logstash Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash... CVE-2015-5619 5.9 MediumAugust 9, 2017
• elastic logstash Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications... CVE-2015-5378 7.5 HighJune 27, 2017
• elastic logstash Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting... CVE-2016-10363 7.5 HighJune 16, 2017
• elastic logstash, elasticsearch output plugin +1 more Logstash Logs Sensitive Information CVE-2016-10362 Fix available 6.5 MediumJune 16, 2017
• elastic logstash Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will... CVE-2016-1000222 7.5 HighJune 16, 2017
• elastic logstash Logstash Logs Sensitive Information CVE-2016-1000221 Fix available 7.5 HighJune 16, 2017
• elastic logstash Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4... CVE-2015-4152 6.4 MediumJune 15, 2015
• elastic logstash Elasticsearch Logstash allows remote attackers to execute arbitrary commands CVE-2014-4326 Fix available 7.5 HighJuly 22, 2014