Skip to content
OpenAdvisories

Archive

February 2015

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2015-1427 Exploited Public exploit Scanner template EPSS 100%

    Improper Access Control in Elasticsearch

    The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

    KEV Mar 25, 2022