Vendor

Elastic

396 known vulnerabilities.

Products

Kibana 196 Elasticsearch 91 Elastic Cloud Enterprise 13 Logstash 9 Apm Server 8 Packetbeat 8 Fleet Server 7 Elastic X-Pack Security 6 Elastic Agent 5 Eck Operator 4 Beats 3 Elastic Cloud Enterprise (ECE) 3 Filebeat 3 X-Pack Security 3 Elastic Enterprise Search 3 Elastic Endpoint Security 2 Elasticsearch X-Pack Machine Learning 2 Elastic Cloud on Kubernetes 2 Elastic App Search 2 Metricbeat 2 Elastic Agent and Elastic Defend 2 Elastic Defend 2 Elastic APM Agent for Go 1 Enterprise Search 1 Elastic Network Drive Connector 1 Elastic X-Pack Alerting 1 Kibana X-Pack Security 1 Elastic Package Registry 1 Elastic Endpoint Security and Elastic Endgame Security 1 Enterprisesearch 1 Endpoint 1 Elasticsearch-Hadoop 1 Elastic APM Java Agent 1 APM Java Agent 1 Elastic Code 1 Endpoint Security 1 Elastic APM agent for Python 1 Elastic APM agent for Ruby 1 Elastic Docker images 1 Elastic APM .NET Agent 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2025-25014 Public exploit EPSS 22%

Kibana arbitrary code execution via prototype pollution

A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.

Elastic Kibana

May 6, 2025
Critical 9.8

CVE-2019-7609 Exploited Public exploit Scanner template EPSS 95%

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacke…

Elastic Kibana

Mar 25, 2019
KEV Jan 10, 2022