Product · Elastic

Elasticsearch X-Pack Machine Learning

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2018-3824

Elasticsearch subject to cross site scripting

X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject data into an index that has a ML job running against it, then when another user views the results of the ML job it could a…

Elastic Elasticsearch X-Pack Machine Learning org.elasticsearch:elasticsearch Maven

Sep 19, 2018