Skip to contentElastic vulnerabilities
Newest
- elastic x-pack security, x-pack +1 moreX-Pack Security 5.2.x would allow access to more fields than the user should have seen if the...CVE-2017-84495.9 Medium
- elastic kibanaKibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting...CVE-2016-103666.1 Medium
- elastic kibanaKibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an...CVE-2016-103656.1 Medium
- elastic kibana, x-pack security +1 moreWith X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests...CVE-2016-103646.5 Medium
- elastic logstashLogstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting...CVE-2016-103637.5 High
- elastic logstash, elasticsearch output plugin +1 moreLogstash Logs Sensitive InformationCVE-2016-10362Fix available6.5 Medium
- elastic logstashLogstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will...CVE-2016-10002227.5 High
- elastic logstashLogstash Logs Sensitive InformationCVE-2016-1000221Fix available7.5 High
- elastic kibanaKibana before 4.5.4 and 4.1.11 are vulnerable to an XSS attack that would allow an attacker to...CVE-2016-10002206.1 Medium
- elastic kibanaKibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and...CVE-2016-10002197.5 High
- elastic kibana reportingKibana Reporting plugin version 2.4.0 is vulnerable to a CSRF vulnerability that could allow an...CVE-2016-10002188.8 High
- elastic kibanaKibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.CVE-2015-90566.1 Medium
- elastic x-pack, x-pack security +1 moreElastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document...CVE-2017-84414.3 Medium
- elastic kibanaStarting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover...CVE-2017-84406.1 Medium
- elastic kibanaKibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual...CVE-2017-84396.1 Medium
- elastic x-pack, x-pack security +1 moreElastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as...CVE-2017-84388.8 High
- elastic kibanaCross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x...CVE-2015-81316.8 Medium
- elastic logstashDirectory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4...CVE-2015-41526.4 Medium
- elastic kibanaCross-site scripting (XSS) vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote...CVE-2015-40934.3 Medium
- elastic elasticsearch, redhat fuse +1 moreImproper Access Control in ElasticsearchCVE-2015-1427In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- elastic elasticsearchElasticsearch Improper Access Control vulnerabilityCVE-2014-3120In KEVPublic exploitFix availableEPSS 88.6%8.1 High
- elastic logstashElasticsearch Logstash allows remote attackers to execute arbitrary commandsCVE-2014-4326Fix available7.5 High