Elastic vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Elastic products: 202 record(s), with severity, exploitation and fixes.

Kibana 127 Elasticsearch 50 Packetbeat 6 Eck Operator 4 Elastic Cloud On Kubernetes 4 Fleet Server 4 Elastic Cloud Enterprise (ECE) 2 Filebeat 2 Metricbeat 2 Elastic Cloud Enterprise 2 Elastic Agent and Elastic Defend 1 Elastic Package Registry 1 Logstash 1 Endpoint Security 1 Winlogbeat 1 Apm Server 1 Maps Server 1 Elastic Agent 1 Elastic Security 1

Exploited only (KEV) →

CVE-2015-1427 Critical · 9.8 KEV Urgent · 83 Public exploit Feb 17, 2015

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

CVE-2014-3120 High · 8.1 KEV Urgent · 76 Public exploit CWE-284 Jul 28, 2014

Elasticsearch Remote Code Execution Vulnerability

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.