Skip to contentElastic vulnerabilities
Newest
- elastic elasticsearchElasticsearch Allocation of Resources Without Limits or ThrottlingCVE-2025-68390Fix available4.9 Medium
- elastic kibanaKibana Allocation of Resources Without Limits or ThrottlingCVE-2025-68389Fix available6.5 Medium
- elastic kibanaKibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-68387Fix available6.1 Medium
- elastic kibanaKibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-68385Fix available7.2 High
- elastic elasticsearchElasticsearch Allocation of Resources Without Limits or ThrottlingCVE-2025-68384Fix available6.5 Medium
- elastic filebeatFilebeat Improper Validation of Specified Index, Position, or Offset in InputCVE-2025-68383Fix available6.5 Medium
- elastic packetbeatPacketbeat Out-of-bounds ReadCVE-2025-683826.5 Medium
- elastic packetbeatPacketbeat Improper Bounds CheckCVE-2025-683816.5 Medium
- elastic packetbeatElasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 FragmentsCVE-2025-68388Fix available5.3 Medium
- elastic elasticsearchElasticsearch Improper AuthenticationCVE-2025-37731Fix available6.8 Medium
- elastic kibanaKibana Cross-site Scripting via the Integration Package Upload FunctionalityCVE-2025-37732Fix available5.4 Medium
- elastic endpointFreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST APICVE-2025-675136.9 Medium
- elastic kibanaKibana Origin Validation ErrorCVE-2025-37734Fix available4.3 Medium
- elastic cloud enterprise, cloud enterprise (ece) +1 moreElastic Cloud Enterprise Improper AuthorizationCVE-2025-377368.8 High
- elastic kibanaImproper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary...CVE-2025-377357.0 High
- elastic endpointFreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parametersCVE-2025-61675Public exploitEPSS 40.3%8.6 High
- elastic endpointFreePBX Endpoint Manager command injection via Network Scanning featureCVE-2025-590518.6 High
- elastic cloud enterprise (ece), cloud enterprise +1 moreElastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template EngineCVE-2025-377299.1 Critical
- elastic elasticsearchElasticsearch Insertion of sensitive information in log fileCVE-2025-37727Fix available5.7 Medium
- elastic kibanaKibana Stored Cross-Site Scripting (XSS)CVE-2025-25017Fix available8.2 High
- elastic kibanaKibana Stored Cross-Site Scripting (XSS)CVE-2025-25018Fix available8.7 High
- elastic kibanaKibana Cross-Site Scripting (XSS)CVE-2025-25009Fix available8.7 High
- elastic kibanaKibana Insufficiently Protected Credentials in the CrowdStrike ConnectorCVE-2025-37728Fix available5.4 Medium
- elastic endpoint, sangoma freepbx +1 moreFreePBX Affected by Authentication Bypass Leading to SQL Injection and RCECVE-2025-57819In KEVPublic exploitEPSS 95.2%10.0 Critical
- elastic kibanaKibana privilege escalation via reporting_user roleCVE-2025-25010Fix available6.5 Medium
- elastic beatsBeats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows InstallerCVE-2025-250117.0 High
- elastic apm serverAPM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows InstallerCVE-2025-07127.0 High
- elastic kibanaKibana Open RedirectCVE-2025-25012Fix available4.3 Medium
- elastic kibanaKibana Improper AuthorizationCVE-2024-43706Fix available7.6 High
- elastic kibanaKibana arbitrary code execution via prototype pollutionCVE-2025-25014Public exploitFix availableEPSS 22.3%9.1 Critical
- elastic logstashLogstash Improper Certificate Validation in TCP outputCVE-2025-37730Fix available6.5 Medium
- elastic elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerabilityCVE-2024-52979Fix available6.5 Medium
- elastic kibanaKibana Unrestricted Upload of File with Dangerous Type Can Lead to XSSCVE-2024-11390Fix available5.4 Medium
- elastic kibanaKibana Unrestricted Upload of FileCVE-2025-25016Fix available4.3 Medium
- elastic apm serverAPM Server Insertion of Sensitive Information into Log FileCVE-2024-119945.7 Medium
- elastic agentElastic Agent Inclusion of Functionality from Untrusted Control SphereCVE-2024-529764.4 Medium
- elastic agent, endpoint security, agent and elastic defend +2 moreElastic Agent / Elastic Endpoint Security local API key disclosureCVE-2023-466696.2 Medium
- elastic defendElastic Defend Insertion of Sensitive Information into Log FilesCVE-2025-250136.5 Medium
- elastic kibanaKibana Prototype Pollution can lead to code injectionCVE-2024-12556Fix available8.7 High
- elastic elasticsearchElasticsearch Vulnerable to Stack Overflow due to a Large RecursionCVE-2024-52981Fix available4.9 Medium
- elastic kibanaAn issue has been identified where a specially crafted request sent to an Observability API could...CVE-2024-52974Fix available6.5 Medium
- elastic elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerabilityCVE-2024-52980Fix available6.5 Medium
- elastic kibanaKibana arbitrary code execution via prototype pollutionCVE-2025-25015Fix available9.9 Critical
- elastic kibanaAn allocation of resources without limits or throttling in Kibana can lead to a crash caused by a...CVE-2024-43708Fix available6.5 Medium
- elastic fleet serverFleet Server sensitive information exposure via logsCVE-2024-529759.0 Critical
- elastic kibanaKibana allocation of resources without limits or throttling leads to crashCVE-2024-52972Fix available6.5 Medium
- elastic kibanaKibana exposure of sensitive information to an unauthorized actorCVE-2024-43707Fix available7.7 High
- elastic kibanaKibana server-side request forgeryCVE-2024-43710Fix available4.3 Medium
- elastic kibanaKibana allocation of resources without limits or throttling leads to crashCVE-2024-529736.5 Medium
- elastic elasticsearchElasticsearch allocation of resources without limits or throttling leads to crashCVE-2024-43709Fix available6.5 Medium
- Show moreLoading…