Elastic

Records415All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical22CVSS 9.0–10.0

CVSS high119CVSS 7.0–8.9

Exploited now

Elastic records in CISA KEV

TI-2014-02491 Elasticsearch Remote Code Execution Vulnerability CRITICAL 92KEV 2022-03-25 TI-2015-01295 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability CRITICAL 100KEV 2022-03-25 TI-2019-05363 Kibana Arbitrary Code Execution CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Kibana 189 records CRITICAL Elasticsearch 91 records CRITICAL Elastic Cloud Enterprise 16 records MEDIUM Logstash 13 records MEDIUM X-pack 9 records MEDIUM Elastic Agent 6 records LOW Elastic Cloud On Kubernetes 6 records MEDIUM Endpoint Security 6 records LOW

Records

13 records in Logstash · all components

TI-2019-05366 CVE-2019-7612 · GHSA-76jg-hr4p-qmfv

Information disclosure through error messages in Elastic Logstash

MEDIUM 47

A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02407 Published 2019-03-25 No fix listed CWE-209

TI-2026-25862 CVE-2026-33466 · GHSA-w3rv-2cr7-p2wh

Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

MEDIUM 44

Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00554 Published 2026-04-08 No fix listed CWE-22

TI-2014-03539 CVE-2014-4326 · GHSA-8qhq-rq4j-8prj

Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to…

LOW 39

Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03297 Published 2014-07-22 Fixed in 1.4.2 CWE-78

TI-2015-04531 CVE-2015-5378 · GHSA-g6rc-3fpq-w2gr

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read…

LOW 38

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02462 Published 2017-06-27 No fix listed CWE-200

TI-2019-05374 CVE-2019-7620 · GHSA-77mg-86wc-vj3g

Uncontrolled resource consumption in Elastic Logstash

LOW 37

Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0208 Published 2019-10-30 No fix listed CWE-400

TI-2023-25173 CVE-2023-46672 · GHSA-r6fg-prgw-3ff5

Logstash Insertion of Sensitive Information into Log File

LOW 36

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00338 Published 2023-11-15 Fixed in 8.11.1 CWE-532

TI-2016-09350 CVE-2016-1000221 · GHSA-vcmm-ppqx-95ch

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP…

LOW 36

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01782 Published 2017-06-16 Fixed in 2.3.4 CWE-200

TI-2016-08414 CVE-2016-10363 · GHSA-x36p-26r2-96m6

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker…

LOW 36

Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Logstash instance.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01533 Published 2017-06-16 Fixed in 2.3.3 CWE-248

TI-2016-09351 CVE-2016-1000222 · GHSA-6wg5-46xg-947r

Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that…

LOW 35

Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01129 Published 2017-06-16 No fix listed CWE-88

TI-2015-03479 CVE-2015-4152 · GHSA-r8rm-c9x9-3f5g

Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash…

LOW 34

Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03008 Published 2015-06-15 No fix listed CWE-22

TI-2018-02787 CVE-2018-3817 · GHSA-m5wv-852x-cj2g

Sensitive information in log files in Elastic Logstash

LOW 31

When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01017 Published 2018-03-30 No fix listed CWE-532

TI-2015-04734 CVE-2015-5619 · GHSA-68pf-743m-hv2w

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash…

LOW 29

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive informa…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01219 Published 2017-08-09 No fix listed CWE-295

TI-2021-05128 CVE-2021-22138 · GHSA-56cm-rmmq-hqpv

Improper certificate validation in Elasticsearch

LOW 18

In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monitoring feature.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00459 Published 2021-05-13 No fix listed CWE-295

Open these records in search →

Critical	22
High	119
Medium	267
Low	7
No CVSS	0