Brand
Elastic: actively exploited vulnerabilities
3 vulnerabilities in Elastic products (Elasticsearch, Kibana) are in CISA’s catalog of exploited vulnerabilities. Last added: March 25, 2022.
-
0 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Elastic category to your radar, or open its page.
- ERP, business applications and databases 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Elastic product (Elasticsearch, Kibana…) rather than the whole brand.
- Elasticsearch2 vulnerabilities, Business apps and data
- Kibana1 vulnerability, Business apps and data
Name used by CISA: Elastic. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Elastic list.
- Rank 1
Elastic KibanaCVE-2019-7609
Kibana Arbitrary Code Execution
CVE from 2019, added in 2022
CVSS severity 10.0critical
Added Jan 10, 2022
- Rank 2
Elastic ElasticsearchCVE-2015-1427
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
CVE from 2015, added in 2022
CVSS severity 9.8critical
Added Mar 25, 2022
- Rank 3
Elastic ElasticsearchCVE-2014-3120
Elasticsearch Remote Code Execution Vulnerability
CVE from 2014, added in 2022
CVSS severity 8.1high
Added Mar 25, 2022
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.