netVigilance Vulnerability intelligence since 2004

Elastic

3 Elastic vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Elastic
Vulnerability Status
overdue 1609d2022-04-15 CVE-2015-1427 Elastic / Elasticsearch Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability 2022-03-25 9.8 past due
overdue 1609d2022-04-15 CVE-2014-3120 Elastic / Elasticsearch Elasticsearch Remote Code Execution Vulnerability 2022-03-25 8.1 past due
overdue 1523d2022-07-10 CVE-2019-7609 Elastic / Kibana Kibana Arbitrary Code Execution 2022-01-10 10.0 past due
3 records Open in catalog with filters →