{"id":"CVE-2015-1427","title":"The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection me","published":"2015-02-17T11:59:04.560Z","updated":"2026-06-16T20:22:24.453Z","severity":"critical","cvssScore":9.8,"epss":0.99906,"epssPct":0.99966,"kev":true,"maturity":"weaponized","actionScore":99,"primaryVendor":"elastic","primaryProduct":"elasticsearch","cweId":null,"fixAvailable":true,"tags":["pre-auth","rce","remote","no-ui"],"epssDelta7":0,"summary":"The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssVersion":"3.1","cvssSource":"nvd-primary","cweName":null,"kevAdded":"2022-03-25T00:00:00.000Z","kevDue":"2022-04-15T00:00:00.000Z","kevRansomware":"Unknown","source":"nvd","cna":"mitre","ssvc":{"exploitation":"active","automatable":"yes","impact":"total"},"sources":{"adp":"2025-10-22T00:05:33.236Z","cna":"2025-10-22T00:05:33.236Z","osv":"2026-11-13T03:18:18.039Z","epss":"2026-10-25","nuclei":"2026-11-13T03:18:10.620Z","cna_seen":"2026-09-29T10:48:10.113Z","exploitdb":"2026-11-13T03:17:58.683Z","github-poc":"2026-11-13T03:18:14.335Z","metasploit":"2026-11-13T03:18:09.107Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":2,"metasploit":1,"nuclei":1,"githubPoc":6},"products":[{"vendor":"elastic","product":"elasticsearch","cpe":"cpe:2.3:a:elastic:elasticsearch"},{"vendor":"redhat","product":"fuse","cpe":"cpe:2.3:a:redhat:fuse"}],"references":[{"url":"http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/","tags":"Patch,Vendor Advisory"},{"url":"http://www.securityfocus.com/archive/1/534689/100/0/threaded","tags":"Broken Link,Third Party Advisory,VDB Entry"},{"url":"http://www.securityfocus.com/bid/72585","tags":"Broken Link,Third Party Advisory,VDB Entry"},{"url":"https://access.redhat.com/errata/RHSA-2017:0868","tags":"Third Party Advisory"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100850","tags":"Third Party Advisory,VDB Entry"},{"url":"https://www.elastic.co/community/security/","tags":"Not Applicable,Vendor Advisory"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427","tags":"US Government Resource"}],"exploits":[{"source":"exploitdb","kind":"remote","date":"2015-03-16"},{"source":"exploitdb","kind":"remote","date":"2015-03-11"},{"source":"metasploit","kind":"exploit","date":"2015-02-11"},{"source":"nuclei","kind":"high","date":null},{"source":"github-poc","kind":"stars:32","date":"2017-01-09"},{"source":"github-poc","kind":"stars:0","date":"2019-01-06"},{"source":"github-poc","kind":"stars:0","date":"2020-06-22"},{"source":"github-poc","kind":"stars:0","date":"2022-07-29"},{"source":"github-poc","kind":"stars:0","date":"2024-11-10"},{"source":"github-poc","kind":"stars:0","date":"2026-10-08"}],"analysis":null,"affectedVersions":[{"vendor":"elastic","product":"elasticsearch","version":"*","vsi":null,"vse":null,"vei":null,"vee":"1.3.8"},{"vendor":"elastic","product":"elasticsearch","version":"*","vsi":"1.4.0","vse":null,"vei":null,"vee":"1.4.3"},{"vendor":"redhat","product":"fuse","version":"1.0.0","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}