Read the docs

Elasticsearch

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Elasticsearch records in CISA KEV

No Elasticsearch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Packetbeat 6 records LOW Elasticsearch 4 records HIGH Kibana 3 records LOW Logstash 3 records LOW Cloud Enterprise 1 record LOW Output Plugin 1 record LOW X-pack 1 record LOW X-pack Reporting 1 record LOW

Records

3 records in Logstash · all components

TI-2017-10795 CVE-2017-14730 · GHSA-v7gq-9pxc-6wm9

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x…

Priority LOW 34

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00347 Published 2017-09-25 No fix listed CWE-732
TI-2015-04734 CVE-2015-5619 · GHSA-68pf-743m-hv2w

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash…

Priority LOW 29

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive informa…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01219 Published 2017-08-09 No fix listed CWE-295
Open these records in search →