Elasticsearch vulnerabilities

Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.

5 matching records

UnknownElastic Elasticsearch Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Vuln · CVE-2015-5531 · Elastic · Elasticsearch · CVE.org · FIRST EPSS · Exploit Database · ElasticsearchPatch nowKEVEPSS 94.79%May 27, 2025
UnknownElastic Kibana External Control of File Name or PathVuln · CVE-2018-17246 · Elastic · Kibana · CVE.org · FIRST EPSS · VulnCheck KEV · ElasticsearchPatch nowKEVEPSS 84.29%Nov 13, 2023
Critical10.0Kibana Arbitrary Code ExecutionVuln · CVE-2019-7609 · Elastic · Kibana · CISA KEV · CVE.org · FIRST EPSS · ElasticsearchPatch nowKEVEPSS 95.34%Mar 25, 2019
Critical9.8Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityVuln · CVE-2015-1427 · Elastic · Elasticsearch · CISA KEV · CVE.org · FIRST EPSS · ElasticsearchPatch nowKEVEPSS 99.91%Feb 17, 2015
High8.1Elasticsearch Remote Code Execution VulnerabilityVuln · CVE-2014-3120 · Elastic · Elasticsearch · CISA KEV · CVE.org · FIRST EPSS · ElasticsearchPatch nowKEVEPSS 88.56%Jul 28, 2014

Sort