Filter
AND
-Infinity
0

ElasticKibana exposure of sensitive information to an unauthorized actor

7.7
First published (updated )

ElasticElasticsearch allocation of resources without limits or throttling leads to crash

7.5
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch elasticsearch-certutil csr fails to encrypt private key

7.5
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerability

7.5
First published (updated )

go/github.com/elastic/apm-serverAPM Server Insertion of Sensitive Information into Log File

7.5
EPSS
0.09%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ElasticKibana Insertion of Sensitive Information into Log File

First published (updated )

ElasticKibana Insertion of Sensitive Information into Log File

First published (updated )

maven/org.elasticsearch:elasticsearch-hadoopElasticsearch-hadoop Unsafe Deserialization

7.8
First published (updated )

maven/org.elasticsearch:elasticsearchIt was identified that malformed scripts used in the script processor of an Ingest Pipeline could ca…

7.5
First published (updated )

ElasticElasticsearch privilege escalation

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/co.elastic.apm:apm-agent-parentAPM Java Agent Local Privilege Escalation

7.8
First published (updated )

ElasticKibana Reporting vulnerabilities

8.8
First published (updated )

ElasticKibana code execution issue

7.2
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch Insertion of sensitive information in audit logs

7.5
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch uncontrolled resource consumption

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.elasticsearch:elasticsearchElasticsearch StackOverflow vulnerability

7.5
First published (updated )

ElasticBeats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue

7.5
First published (updated )

ElasticCode Injection

8.8
First published (updated )

Elastic EndpointAn issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which coul…

7.8
First published (updated )

Elastic EndpointAn issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame f…

7.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ElasticA Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticat…

7.5
First published (updated )

pip/elastic-apmA local privilege escalation issue was found with the APM Java agent, where a user on the system cou…

7.8
First published (updated )

ElasticAll versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default i…

7.5
First published (updated )

ElasticXEE

7.5
First published (updated )

ElasticThe fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and…

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ElasticCode Injection

8.8
First published (updated )

redhat/kibanaCode Injection

7.2
First published (updated )

ElasticElasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation…

8.8
First published (updated )

pip/elastic-apmInput Validation

7.2
First published (updated )

redhat/elasticsearchA permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Secu…

8.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203