Skip to contentElastic vulnerabilities
Newest
- elastic defendElastic Defend Improper Handling of Alternate Encoding Leads to CrashCVE-2024-372845.5 Medium
- elastic elasticsearchElasticsearch Incorrect AuthorizationCVE-2024-12539Fix available6.0 Medium
- elastic kibanaKibana arbitrary code execution via YAML deserializationCVE-2024-37285Fix available9.1 Critical
- watchguard panda dome, elastic endpoint security, watchgua panda dome firmware +2 more +4 moreWatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEMCVE-2024-84248.5 High
- elastic kibanaA deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to...CVE-2024-37288Fix available9.9 Critical
- elastic kibanaKibana arbitrary code execution via prototype pollutionCVE-2024-372879.1 Critical
- elastic agentElastic Agent Insertion of Sensitive Information into Log FileCVE-2024-372836.5 Medium
- elastic apm serverAPM Server Insertion of Sensitive Information into Log FileCVE-2024-37286Fix available5.7 Medium
- elastic elasticsearchElasticsearch elasticsearch-certutil csr fails to encrypt private keyCVE-2024-23444Fix available4.9 Medium
- elastic kibanaKibana Denial of Service issueCVE-2024-37281Fix available6.5 Medium
- elastic elasticsearchElasticsearch Insertion of Sensitive Information into Log FileCVE-2023-49921Fix available5.2 Medium
- elastic cloud enterpriseIt was identified that under certain specific preconditions, an API key that was originally...CVE-2024-372828.1 High
- elastic kibanaA high-privileged user, allowed to create custom osquery packs 17 could affect the availability...CVE-2024-23443Public exploitFix available4.9 Medium
- elastic kibanaKibana open redirect issueCVE-2024-23442Fix available6.1 Medium
- elastic kibanaKibana Broken Access Control issueCVE-2024-37279Fix available4.3 Medium
- elastic elasticsearchElasticsearch StackOverflow vulnerabilityCVE-2024-37280Fix available4.9 Medium
- elastic elasticsearchElasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictionsCVE-2024-23445Fix available6.5 Medium
- elastic elasticsearchElasticsearch Uncaught ExceptionCVE-2024-23449Fix available4.3 Medium
- elastic elasticsearchElasticsearch Incorrect Authorization in the Remote Cluster Security API key based security modelCVE-2024-23451Fix available4.4 Medium
- elastic elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerabilityCVE-2024-23450Fix available4.9 Medium
- elastic apm serverAPM Server Insertion of Sensitive Information into Log FileCVE-2024-23448Fix available5.7 Medium
- elastic network drive connectorElastic Network Drive Connector Improper Access ControlCVE-2024-234475.3 Medium
- elastic kibanaKibana Broken Access Control issueCVE-2024-234466.5 Medium
- elastic kibanaKibana Insertion of Sensitive Information into Log FileCVE-2023-466758.0 High
- elastic kibanaKibana Insertion of Sensitive Information into Log FileCVE-2023-466718.0 High
- elastic agentElastic Agent Insertion of Sensitive Information into Log FileCVE-2023-66876.8 Medium
- elastic beatsBeats Insertion of Sensitive Information into Log FileCVE-2023-49922Fix available6.8 Medium
- elastic enterprise searchEnterprise Search Insertion of Sensitive Information into Log FileCVE-2023-499236.8 Medium
- elastic elasticsearch, elasticsearch-hadoop +1 moreElasticsearch-hadoop Unsafe DeserializationCVE-2023-46674Fix available6.0 Medium
- elastic elasticsearchElasticsearch Improper Handling of Exceptional ConditionsCVE-2023-46673Fix available6.5 Medium
- elastic elasticsearchElasticsearch privilege escalationCVE-2021-37937Fix available5.9 Medium
- elastic apm java agentAPM Java Agent Local Privilege EscalationCVE-2021-37942Fix available7.0 High
- elastic apm .net agentElastic APM .NET Agent information disclosureCVE-2021-22143Fix available2.1 Low
- elastic kibanaKibana Reporting vulnerabilitiesCVE-2021-221426.6 Medium
- elastic kibanaKibana path traversal issueCVE-2021-221513.1 Low
- elastic kibanaKibana code execution issueCVE-2021-221506.6 Medium
- elastic logstashLogstash Insertion of Sensitive Information into Log FileCVE-2023-46672Fix available8.4 High
- elastic cloud on kubernetesElastic Cloud on Kubernetes (ECK) secret token configuration issueCVE-2023-314165.3 Medium
- elastic elasticsearchElasticsearch Insertion of sensitive information in audit logsCVE-2023-31417Fix available4.1 Medium
- elastic elasticsearch, cloud enterprise +1 moreElasticsearch uncontrolled resource consumptionCVE-2023-31418Fix available7.5 High
- elastic elasticsearchElasticsearch StackOverflow vulnerabilityCVE-2023-31419Public exploitFix availableEPSS 61.1%6.5 Medium
- elastic sharepoint online python connectorElastic Sharepoint Online Python Connector Improper Access ControlCVE-2023-466665.3 Medium
- elastic apm server, beats, agent +1 more +3 moreBeats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issueCVE-2023-314215.9 Medium
- elastic kibanaKibana Insertion of Sensitive Information into Log FileCVE-2023-314229.0 Critical
- elastic fleet serverFleet Server Insertion of Sensitive Information into Log FileCVE-2023-466678.1 High
- elastic endpointElastic Endpoint Insertion of Sensitive Information into Log FileCVE-2023-466684.6 Medium
- elastic kibanaKibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges...CVE-2023-314158.8 High
- elastic kibanaKibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with...CVE-2023-314148.8 High
- elastic filebeatFilebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http...CVE-2023-314133.3 Low
- elastic kibanaAn open redirect issue was discovered in Kibana that could lead to a user being redirected to an...CVE-2022-387796.1 Medium
- Show moreLoading…