Skip to content
OpenAdvisories

Product · Elastic

Elastic Defend

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-25013

    Elastic Defend Insertion of Sensitive Information into Log Files

    Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.

    Elastic Elastic Defend
  • Medium 5.5
    CVE-2024-37284

    Elastic Defend Improper Handling of Alternate Encoding Leads to Crash

    Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from q…

    Elastic Elastic Defend