İçeriğe atla
Noroxi

elasticsearch kayıtları

elasticsearch üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %5,3
Pre-auth RCE
0
Düzeltme kaydı olan
%47,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 20
  3. 25
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2015-5531
    48Planlayın

    Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors rela

    OrtaCVSS 5,0SilahlaştırılmışEPSS %94

    elasticsearch · elasticsearch17 Ağu 2015

  • CVE-2015-4165
    31İzleyin

    The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code fro

    YüksekCVSS 7,5İstismar yokEPSS %4

    elasticsearch · elasticsearch9 Ağu 2017

  • CVE-2015-5378
    31İzleyin

    Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logst

    YüksekCVSS 7,5İstismar yokEPSS %2

    elastic · logstash27 Haz 2017

  • CVE-2017-14730
    31İzleyin

    The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable dire

    YüksekCVSS 7,8İstismar yokEPSS %0

    gentoo · linux25 Eyl 2017

  • CVE-2017-11480
    30İzleyin

    Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler.

    YüksekCVSS 7,5İstismar yokEPSS %1

    elasticsearch · packetbeat8 Ara 2017

  • CVE-2026-26932
    30İzleyin

    Improper Validation of Array Index in Packetbeat Leading to Denial of Service

    YüksekCVSS 7,5İstismar yokEPSS %0

    elasticsearch · packetbeat26 Şub 2026

  • CVE-2015-3337
    27İzleyin

    Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attacke

    OrtaCVSS 4,3Kavram kanıtıEPSS %33

    elasticsearch · elasticsearch1 May 2015

  • CVE-2020-7017
    26İzleyin

    In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw.

    OrtaCVSS 6,7İstismar yokEPSS %1

    elasticsearch · kibana27 Tem 2020

  • CVE-2016-10362
    26İzleyin

    Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth cre

    OrtaCVSS 6,5İstismar yokEPSS %1

    elasticsearch · output plugin16 Haz 2017

  • CVE-2025-68381
    26İzleyin

    Packetbeat Improper Bounds Check

    OrtaCVSS 6,5İstismar yokEPSS %0

    elasticsearch · packetbeat18 Ara 2025

  • CVE-2025-68382
    26İzleyin

    Packetbeat Out-of-bounds Read

    OrtaCVSS 6,5İstismar yokEPSS %0

    elasticsearch · packetbeat18 Ara 2025

  • CVE-2017-11479
    24İzleyin

    Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive i

    OrtaCVSS 6,1İstismar yokEPSS %1

    elastic · kibana28 Eyl 2017

  • CVE-2015-5619
    23İzleyin

    Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates f

    OrtaCVSS 5,9İstismar yokEPSS %1

    elastic · logstash9 Ağu 2017

  • CVE-2017-8444
    23İzleyin

    The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper.

    OrtaCVSS 5,9İstismar yokEPSS %0

    elasticsearch · cloud enterprise28 Eyl 2017

  • CVE-2026-26933
    22İzleyin

    Improper Validation of Array Index in Packetbeat Leading to Denial of Service

    OrtaCVSS 5,7İstismar yokEPSS %0

    elasticsearch · packetbeat19 Mar 2026

  • CVE-2017-8446
    21İzleyin

    The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersona

    OrtaCVSS 5,3İstismar yokEPSS %0

    elasticsearch · x-pack18 Ağu 2017

  • CVE-2025-68388
    21İzleyin

    Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPE

    OrtaCVSS 5,3İstismar yokEPSS %0

    elasticsearch · packetbeat18 Ara 2025

  • CVE-2020-7016
    19İzleyin

    Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion.

    OrtaCVSS 4,8İstismar yokEPSS %1

    elasticsearch · kibana27 Tem 2020

  • CVE-2014-6439
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arb

    OrtaCVSS 4,3İstismar yokEPSS %2

    elasticsearch · elasticsearch9 Eki 2014