Skip to contentElastic vulnerabilities
Newest
- elastic kibanaKibana versions before 6.8.6 and 7.5.1 contain a cross site scripting (XSS) flaw in the...CVE-2019-76215.4 Medium
- elastic logstashLogstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats...CVE-2019-76207.5 High
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2019-7619Fix available5.3 Medium
- elastic code, kibana +1 moreA local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a...CVE-2019-76186.5 Medium
- elastic apm agent, apm agent for python +1 moreElastic APM agent for Python client CGI proxy redirection flawCVE-2019-7617Fix available7.2 High
- elastic kibanaKibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the...CVE-2019-7616Public exploit4.9 Medium
- elastic apm agent for ruby, apm-agent-ruby +1 moreElastic APM agent for Ruby vulnerable to Improper Certificate ValidationCVE-2019-7615Fix available7.4 High
- elastic elasticsearchConcurrent Execution using Shared Resource with Improper Synchronization in ElasticsearchCVE-2019-7614Fix available5.9 Medium
- elastic winlogbeat, logstash +1 moreWinlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to...CVE-2019-76137.5 High
- elastic logstash, netapp active iq performance analytics services +1 moreA sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1...CVE-2019-76129.8 Critical
- elastic elasticsearchImproper Access Control in ElasticsearchCVE-2019-7611Fix available8.1 High
- elastic kibanaKibana versions before 6.6.1 contain an arbitrary code execution flaw in the security audit...CVE-2019-76109.0 Critical
- elastic kibanaKibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could...CVE-2019-76086.1 Medium
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion...CVE-2019-7609In KEVPublic exploitEPSS 95.3%10.0 Critical
- elastic elasticsearchImproper Restriction of XML External Entity Reference in ElasticsearchCVE-2018-17247Fix available5.9 Medium
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console...CVE-2018-17246Public exploitEPSS 84.3%9.8 Critical
- elastic kibanaKibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way...CVE-2018-172459.8 Critical
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2018-17244Fix available6.5 Medium
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2018-3831Fix available8.8 High
- elastic kibana, redhat openshift container platform +1 moreKibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source...CVE-2018-38306.1 Medium
- elastic cloud enterpriseIn Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could...CVE-2018-38295.3 Medium
- elastic cloud enterpriseElastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure...CVE-2018-38287.5 High
- elastic elasticsearch, azure repository +1 moreA sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly...CVE-2018-38278.1 High
- elastic elasticsearchIn Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the _snapshot API....CVE-2018-38266.5 Medium
- elastic cloud enterprise (ece), cloud enterprise +1 moreIn Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used...CVE-2018-38255.9 Medium
- elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 moreElasticsearch subject to cross site scriptingCVE-2018-3824Fix available6.1 Medium
- elastic elasticsearch x-pack machine learning, elasticsearch x-pack, kibana x-pack +1 more +3 moreX-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS)...CVE-2018-38235.4 Medium
- elastic x-pack, x-pack security +1 moreX-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack...CVE-2018-38229.8 Critical
- elastic kibanaKibana versions after 5.1.1 and before 5.6.7 and 6.1.3 had a cross-site scripting (XSS)...CVE-2018-38216.1 Medium
- elastic kibanaKibana versions after 6.1.0 and before 6.1.3 had a cross-site scripting (XSS) vulnerability in...CVE-2018-38206.1 Medium
- elastic kibanaThe fix in Kibana for ESA-2017-23 was incomplete. With X-Pack security enabled, Kibana versions...CVE-2018-38196.1 Medium
- elastic kibanaKibana versions 5.1.1 to 6.1.2 and 5.6.6 had a cross-site scripting (XSS) vulnerability via the...CVE-2018-38186.1 Medium
- elastic logstashWhen logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2...CVE-2018-38176.5 Medium
- elastic elasticsearch** DISPUTED ** Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via...CVE-2015-5377Public exploitDisputedEPSS 14.4%9.8 Critical
- elastic kibanaThe Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana...CVE-2017-114826.1 Medium
- elastic kibanaKibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL...CVE-2017-114816.1 Medium
- elastic packetbeatDenial of Service in PacketbeatCVE-2017-11480Fix available7.5 High
- elastic x-pack alerting, x-pack +1 moreAn error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users...CVE-2017-84488.8 High
- elastic x-pack security, x-pack +1 moreAn error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has...CVE-2017-84476.5 Medium
- elastic cloud enterpriseThe client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt...CVE-2017-84445.9 Medium
- elastic kibanaKibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that...CVE-2017-114796.1 Medium
- elasticsearch x-pack, elastic x-pack reporting +1 moreImproper Privilege Management in X-PackCVE-2017-8446Fix available5.3 Medium
- elastic x-pack security, x-pack +1 moreAn error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If...CVE-2017-84455.5 Medium
- elastic logstashLogstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash...CVE-2015-56195.9 Medium
- elastic elasticsearch x-pack security, x-pack +1 moreElasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the...CVE-2017-84426.5 Medium
- elastic kibana, kibana x-pack security +1 moreIn Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the...CVE-2017-84436.5 Medium
- elastic logstashLogstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications...CVE-2015-53787.5 High
- elastic kibanaKibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be...CVE-2017-84527.5 High
- elastic kibana, x-pack security +1 moreWith X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the...CVE-2017-84516.1 Medium
- elastic x-pack, x-pack security +1 moreX-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi...CVE-2017-84507.5 High
- Show moreLoading…