Vulnerabilidades de Elastic

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Elastic: 202 registro(s), com severidade, exploração e correções.

Kibana 127 Elasticsearch 50 Packetbeat 6 Eck Operator 4 Elastic Cloud On Kubernetes 4 Fleet Server 4 Elastic Cloud Enterprise (ECE) 2 Filebeat 2 Metricbeat 2 Elastic Cloud Enterprise 2 Elastic Agent and Elastic Defend 1 Elastic Package Registry 1 Logstash 1 Endpoint Security 1 Winlogbeat 1 Apm Server 1 Maps Server 1 Elastic Agent 1 Elastic Security 1

Somente exploradas (KEV) →

CVE-2015-1427 Crítica · 9.8 KEV Urgente · 83 Exploit público 17/02/2015

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

CVE-2014-3120 Alta · 8.1 KEV Urgente · 76 Exploit público CWE-284 28/07/2014

Elasticsearch Remote Code Execution Vulnerability

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.