elasticsearch · threatengine.sh

Home/Product/elastic elasticsearch

Product

elastic elasticsearch

66 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 8.0.0 and < 8.19.11

Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via I

>= 8.0.0 and < 8.19.11

Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input

>= 7.0.0 and <= 7.17.29

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot rest

>= 8.6.0 and < 8.19.9

Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive alloca

>= 7.0.0 and <= 7.17.29

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to c

>= 7.0.0 and <= 7.17.29

Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protoc

>= 7.0.0 and <= 7.17.29

Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100)

>= 7.0.0 and <= 7.17.29

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A mal

>= 7.0.0 and <= 7.17.29

Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions w

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions

>= 7.17.0 and < 7.17.24

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCo

>= 7.17.0 and < 8.15.1

A flaw was discovered in Elasticsearch, where a large recursion using the innerForbidCircularReferences function of the PatternBan

>= 7.17.0 and < 7.17.21

An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a

>= 8.16.0 and < 8.16.2

An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circu

>= 7.0.0 and < 7.17.23

It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create

>= 7.0.0 and < 7.17.16

An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lea

>= 8.13.1 and < 8.14.0

A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of �

>= 8.10.0 and < 8.14.0

It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-creat

>= 8.4.0 and < 8.11.1

An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor thr

>= 8.10.0 and < 8.13.0

Incorrect Authorization issue exists in the API key based security model for Remote Cluster Security, which is currently in Beta,

>= 7.0.0 and < 7.17.19

A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the

An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that

>= 7.0.0 and < 7.17.14

It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to c

>= 7.13.0 and <= 7.14.0

An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service

>= 7.0.0 and <= 7.17.12

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack O

An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user could for

>= 7.0.0 and <= 7.17.12

Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found that this

>= 8.0.0 and < 8.2.1

A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shu

>= 7.16.0 and < 7.17.1

A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the

>= 7.11.0 and < 7.14.0

Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authent

In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service

All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While

>= 7.10.0 and <= 7.13.3

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to sub

In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is u

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and pr

>= 7.6.0 and <= 7.11.0

A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security

Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body

>= 7.7.0 and < 7.10.2

Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async

Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. S

In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Securi

In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to

Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that w

>= 6.7.0 and <= 6.8.7

The fix for CVE-2020-7009 was found to be incomplete. Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a priv

>= 6.7.0 and < 6.8.8

Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker is able t

>= 6.7.0 and <= 6.8.3

Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthe

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user aut

A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a s

A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document Level Securi

Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy all

>= 6.4.0 and <= 6.4.2

Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the

>= 5.6.0 and < 5.6.12

Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when secrets are con

>= 6.0.0 and <= 6.2.4

In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the _snapshot API. When the access_key and security_

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport proto

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is l

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attac

Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain s

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-wri

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS cert

The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execut

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basi

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified ve

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remo

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox pro

Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to

The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrar

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin