Skip to content
OpenAdvisories

Vendor

Elastic

396 known vulnerabilities.

Products

Kibana 196 Elasticsearch 91 Elastic Cloud Enterprise 13 Logstash 9 Apm Server 8 Packetbeat 8 Fleet Server 7 Elastic X-Pack Security 6 Elastic Agent 5 Eck Operator 4 Beats 3 Elastic Cloud Enterprise (ECE) 3 Filebeat 3 X-Pack Security 3 Elastic Enterprise Search 3 Elastic Endpoint Security 2 Elasticsearch X-Pack Machine Learning 2 Elastic Cloud on Kubernetes 2 Elastic App Search 2 Metricbeat 2 Elastic Agent and Elastic Defend 2 Elastic Defend 2 Elastic APM Agent for Go 1 Enterprise Search 1 Elastic Network Drive Connector 1 Elastic X-Pack Alerting 1 Kibana X-Pack Security 1 Elastic Package Registry 1 Elastic Endpoint Security and Elastic Endgame Security 1 Enterprisesearch 1 Endpoint 1 Elasticsearch-Hadoop 1 Elastic APM Java Agent 1 APM Java Agent 1 Elastic Code 1 Endpoint Security 1 Elastic APM agent for Python 1 Elastic APM agent for Ruby 1 Elastic Docker images 1 Elastic APM .NET Agent 1
All Critical High Medium Low Exploited only Public exploit

242 results · Clear filters · Feed

  • Medium 5.3
    CVE-2017-8446

    Improper Privilege Management in X-Pack

    The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reportin…

    Elastic Elastic X-Pack Reporting org.elasticsearch.plugin:x-pack Maven
  • Medium 6.5
    CVE-2016-10362

    Logstash Logs Sensitive Information

    Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

    Elastic Logstash logstash-core RubyGems