Filter
AND
Software
elastic elasticsearch
12
elastic kibana
10
elastic logstash
7
elastic endpoint security
4
elastic enterprise search
3
elastic x-pack
3
elastic apm agent
2
elastic apm server
2
elastic elastic cloud enterprise
2
elastic endgame
2
elastic apm java agent
1
elastic apm-agent-ruby
1
elastic azure repository
1
elastic elastic agent
1
elastic elastic app search
1
elastic elastic beats
1
elastic elastic cloud on kubernetes
1
elastic elastic fleet server
1
elastic fleet server
1
elastic kibana reporting
1
elastic winlogbeat
1
elasticsearch logstash
1
CVE-2023-46667Fleet Server Insertion of Sensitive Information into Log File
8.1
First published (updated )
Elastic WinlogbeatWinlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to in…
7.5
First published (updated )
Elastic ElasticsearchA permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Secu…
8.1
First published (updated )
Elastic Elastic Cloud On KubernetesElastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random num…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.elasticsearch:elasticsearch-hadoopElasticsearch-hadoop Unsafe Deserialization
7.8
First published (updated )
Elastic Apm ServerAPM Server Insertion of Sensitive Information into Log File
7.5
EPSS
0.09%
First published (updated )
Elastic LogstashLogstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will creat…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Elastic KibanaKibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and author…
7.5
First published (updated )
Elastic KibanaKibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cl…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Elastic X-PackElastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as fun…
8.8
First published (updated )
Elastic X-PackAn error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapp…
8.8
First published (updated )
Elastic Elastic Cloud EnterpriseElastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability…
7.5
First published (updated )
Elastic Azure RepositoryA sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticse…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Elastic LogstashLogstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats inpu…
7.5
First published (updated )
Elastic Apm-agent-rubyA TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. Whe…
7.4
First published (updated )
Elastic ElasticsearchElasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Elastic ElasticsearchThe fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and…
8.8
First published (updated )
Elastic Enterprise SearchElastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interfac…
8.8
First published (updated )
maven/co.elastic.apm:apm-agent-parentAPM Java Agent Local Privilege Escalation
7.8
First published (updated )
Elastic Apm AgentA local privilege escalation issue was found with the APM Java agent, where a user on the system cou…
7.8
First published (updated )
Elastic ElasticsearchElasticsearch privilege escalation
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.