Read the docs

Elasticsearch

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Elasticsearch records in CISA KEV

No Elasticsearch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Packetbeat 6 records LOW Elasticsearch 4 records HIGH Kibana 3 records LOW Logstash 3 records LOW Cloud Enterprise 1 record LOW Output Plugin 1 record LOW X-pack 1 record LOW X-pack Reporting 1 record LOW

Records

1 record in Output Plugin · all components

TI-2016-08413 CVE-2016-10362 · GHSA-3gg4-6hqg-2vjx

Sensitive information in log files in Elastic Logstash

Priority LOW 31

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01092 Published 2017-06-16 Fixed in 5.0.1 CWE-532
Open these records in search →