Read the docs

Elasticsearch

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Elasticsearch records in CISA KEV

No Elasticsearch vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Packetbeat 6 records LOW Elasticsearch 4 records HIGH Kibana 3 records LOW Logstash 3 records LOW Cloud Enterprise 1 record LOW Output Plugin 1 record LOW X-pack 1 record LOW X-pack Reporting 1 record LOW

Records

1 record in X-pack · all components

TI-2017-05986 CVE-2017-8446 · GHSA-m728-qvxh-xfjq

Insufficiently protected credentials in Elastic X-Pack Reporting

Priority LOW 25

The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.00695 Published 2017-08-18 Fixed in 5.5.2 CWE-522
Open these records in search →