Read the docs

Elastic

Records415All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical22CVSS 9.0–10.0
CVSS high119CVSS 7.0–8.9

Exploited now

Elastic records in CISA KEV
TI-2014-02491 Elasticsearch Remote Code Execution Vulnerability Priority CRITICAL 92KEV 2022-03-25TI-2015-01295 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-03-25TI-2019-05363 Kibana Arbitrary Code Execution Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Kibana 189 records CRITICAL Elasticsearch 91 records CRITICAL Elastic Cloud Enterprise 16 records MEDIUM Logstash 13 records MEDIUM X-pack 9 records MEDIUM Elastic Agent 6 records LOW Elastic Cloud On Kubernetes 6 records MEDIUM Endpoint Security 6 records LOW

Records

6 records in Endpoint Security · all components

TI-2022-18281 CVE-2022-38777 · GHSA-x4cg-qw8v-hq66

Improper privilege management in Elastic Endpoint Security

Priority LOW 36

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00255 Published 2023-02-08 No fix listed CWE-269
TI-2022-18280 CVE-2022-38775 · GHSA-w54m-96qg-mxgp

Improper privilege management in Elastic Endpoint Security

Priority LOW 36

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00262 Published 2023-01-24 No fix listed CWE-269
TI-2022-07766 CVE-2022-23714 · GHSA-v4wm-hvmw-84h7

Access control flaw in Elastic Endpoint Security

Priority LOW 34

A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the Local…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00237 Published 2022-07-06 No fix listed CWE-264
TI-2023-25171 CVE-2023-46669 · GHSA-xr86-xwvg-mq5q

Elastic Agent / Elastic Endpoint Security local API key disclosure

Priority LOW 31

Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00197 Published 2025-05-01 Fixed in 8.15.0 CWE-200
TI-2026-40528 CVE-2026-56152 · GHSA-vvj5-p4vc-v5q3

Incorrect Authorization in Kibana Leading to Information Disclosure

Priority LOW 24

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00305 Published 2026-07-01 No fix listed CWE-863
Open these records in search →