Skip to contentElastic vulnerabilities
Newest
- elastic kibana, decode-uri-component project decode-uri-component +1 moreA flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could...CVE-2022-387786.5 Medium
- elastic endpoint security, endgame +1 moreAn issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which...CVE-2022-387777.8 High
- elastic endpoint securityAn issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which...CVE-2022-387757.8 High
- elastic endgame, endpoint security, endpoint security and elastic endgame security +2 moreAn issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic...CVE-2022-387747.8 High
- elastic kibanaIt was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using...CVE-2021-379365.4 Medium
- elastic cloud enterpriseA flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing...CVE-2022-237165.3 Medium
- elastic cloud enterpriseA flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive...CVE-2022-237156.5 Medium
- elastic endpoint securityA local privilege escalation (LPE) issue was discovered in the ransomware canaries features of...CVE-2022-237147.8 High
- elastic kibanaA cross-site-scripting (XSS) vulnerability was discovered in the Vega Charts Kibana integration...CVE-2022-237136.1 Medium
- elastic elasticsearchImproper Check for Unusual or Exceptional Conditions in ElasticsearchCVE-2022-23712Fix available7.5 High
- elastic kibanaA vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring...CVE-2022-237115.3 Medium
- elastic kibanaWithdrawn: Cross-site Scripting in KibanaCVE-2022-237106.1 Medium
- elastic kibanaA flaw was discovered in Kibana in which users with Read access to the Uptime feature could...CVE-2022-237094.3 Medium
- elastic elasticsearchElasticsearch privilege escalationCVE-2022-23708Fix available4.3 Medium
- elastic kibanaAn XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an...CVE-2022-237075.4 Medium
- elastic apm java agent, apm agent +1 moreAPM Java Agent Local Privilege EscalationCVE-2021-37941Fix available7.8 High
- elastic enterprise search, enterprisesearch +1 moreAn information disclosure via GET request server-side request forgery vulnerability was...CVE-2021-379406.8 Medium
- elastic kibanaAn open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16. If a logged in user...CVE-2021-221416.1 Medium
- elastic kibanaKibana Sensitive Data DisclosureCVE-2021-37939Fix available2.7 Low
- elastic kibanaIt was discovered that on Windows operating systems specifically, Kibana was not validating a...CVE-2021-379384.3 Medium
- elastic enterprise searchElastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API...CVE-2021-221488.8 High
- elastic enterprise searchElastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API...CVE-2021-221498.8 High
- elastic elasticsearchExposure of sensitive information in ElasticsearchCVE-2021-22147Fix available6.5 Medium
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreDenial of Service in ElasticsearchCVE-2021-22144Fix available6.5 Medium
- elastic elasticsearchAll versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by...CVE-2021-22146Public exploitFix availableEPSS 35.8%7.5 High
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreGeneration of Error Message Containing Sensitive Information in ElasticsearchCVE-2021-22145Public exploitFix availableEPSS 76.2%6.5 Medium
- elastic app searchElastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity...CVE-2021-221407.5 High
- elastic kibanaKibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook...CVE-2021-221396.5 Medium
- elastic logstash, elasticsearch +1 moreIn Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw...CVE-2021-22138Fix available3.7 Low
- elastic elasticsearchExposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2021-22137Fix available5.3 Medium
- elastic kibanaIn Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where...CVE-2021-221363.5 Low
- elastic elasticsearchAPI information disclosure flaw in ElasticsearchCVE-2021-22135Fix available5.3 Medium
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreExposure of Sensitive Information to an Unauthorized ActorCVE-2021-22134Fix available4.3 Medium
- elastic apm agent, apm agent for go +1 moreInformation Disclosure in go.elastic.co/apmCVE-2021-22133Fix available2.4 Low
- elastic elasticsearchInsertion of Sensitive Information into Log File in ElasticsearchCVE-2020-7021Fix available4.9 Medium
- elastic elasticsearch, oracle communications cloud native core automated test suite +1 moreInsufficiently Protected Credentials in ElasticsearchCVE-2021-22132Fix available4.8 Medium
- elastic kibana, redhat openshift container platform +1 moreThe elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana consol…CVE-2020-278166.1 Medium
- elastic elasticsearchPrivilege Context Switching Error in ElasticsearchCVE-2020-7020Fix available3.1 Low
- elastic elasticsearchImproper privilege management in elasticsearchCVE-2020-7019Fix available6.5 Medium
- elastic enterprise searchElastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search...CVE-2020-70188.8 High
- elastic kibana, oracle communications billing and revenue management, communications cloud native core network function cloud native environment +1 more +3 moreIn Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS...CVE-2020-7017Fix available6.7 Medium
- elastic kibana, oracle communications billing and revenue management, communications cloud native core network function cloud native environment +1 more +3 moreKibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An...CVE-2020-7016Fix available4.8 Medium
- elastic kibana, redhat openshift container platform +1 moreIt was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in...CVE-2020-107434.3 Medium
- elastic kibanaKibana versions before 6.8.9 and 7.7.0 contains a stored XSS flaw in the TSVB visualization. An...CVE-2020-70155.4 Medium
- elastic elasticsearchPrivilege Escalation Flaw in ElasticsearchCVE-2020-7014Fix available8.8 High
- elastic kibana, redhat openshift container platform +1 moreKibana versions before 6.8.9 and 7.7.0 contain a prototype pollution flaw in TSVB. An...CVE-2020-70137.2 High
- elastic kibanaKibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the...CVE-2020-7012Public exploitEPSS 18.2%8.8 High
- elastic app searchElastic App Search versions before 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result, that URL will be…CVE-2020-70116.1 Medium
- elastic cloud on kubernetesCryptographic Issues in ECKCVE-2020-7010Fix available7.5 High
- elastic elasticsearchImproper Privilege Management in ElasticsearchCVE-2020-7009Fix available8.8 High
- Show moreLoading…