Filter
AND
-Infinity
0

ElasticKibana Prototype Pollution can lead to code injection

8.7
First published (updated )

ElasticKibana exposure of sensitive information to an unauthorized actor

7.7
First published (updated )

ElasticElasticsearch allocation of resources without limits or throttling leads to crash

7.5
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch elasticsearch-certutil csr fails to encrypt private key

7.5
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch Uncontrolled Resource Consumption vulnerability

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

go/github.com/elastic/apm-serverAPM Server Insertion of Sensitive Information into Log File

7.5
EPSS
0.09%
First published (updated )

ElasticKibana Insertion of Sensitive Information into Log File

First published (updated )

ElasticKibana Insertion of Sensitive Information into Log File

First published (updated )

maven/org.elasticsearch:elasticsearch-hadoopElasticsearch-hadoop Unsafe Deserialization

7.8
First published (updated )

maven/org.elasticsearch:elasticsearchIt was identified that malformed scripts used in the script processor of an Ingest Pipeline could ca…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ElasticElasticsearch privilege escalation

8.8
First published (updated )

maven/co.elastic.apm:apm-agent-parentAPM Java Agent Local Privilege Escalation

7.8
First published (updated )

ElasticKibana Reporting vulnerabilities

8.8
First published (updated )

ElasticKibana code execution issue

7.2
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch Insertion of sensitive information in audit logs

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

maven/org.elasticsearch:elasticsearchElasticsearch uncontrolled resource consumption

7.5
First published (updated )

maven/org.elasticsearch:elasticsearchElasticsearch StackOverflow vulnerability

7.5
First published (updated )

ElasticBeats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue

7.5
First published (updated )

ElasticCode Injection

8.8
First published (updated )

Elastic EndpointAn issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which coul…

7.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Elastic EndpointAn issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame f…

7.8
First published (updated )

ElasticA Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticat…

7.5
First published (updated )

pip/elastic-apmA local privilege escalation issue was found with the APM Java agent, where a user on the system cou…

7.8
First published (updated )

ElasticAll versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default i…

7.5
First published (updated )

ElasticXEE

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ElasticThe fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and…

8.8
First published (updated )

ElasticCode Injection

8.8
First published (updated )

redhat/kibanaCode Injection

7.2
First published (updated )

ElasticElasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation…

8.8
First published (updated )

pip/elastic-apmInput Validation

7.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203