Elasticsearch vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
77 matching records
- Medium6.8Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates.Check if you run itEPSS 0.19%Dec 15, 2025
- Medium5.4Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to render HTML tags within a user’s browser via the integCheck if you run itEPSS 0.18%Dec 15, 2025
- Medium5.4Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching.Check if you run itEPSS 0.41%Nov 24, 2025
- Critical9.1Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs.Check if you run itEPSS 0.76%Nov 24, 2025
- Medium5.3CGA-xx6f-c7xm-hc26Open the advisoryNov 19, 2025
- Medium4.3Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.Check if you run itEPSS 0.21%Nov 12, 2025
- High7.0Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM.Check if you run itEPSS 0.14%Nov 6, 2025
- Medium5.7Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://wCheck if you run itEPSS 0.25%Oct 10, 2025
- High8.2Improper Neutralization of Input During Web Page Generation in Kibana can lead to Cross-Site Scripting (XSS)Check if you run itEPSS 0.27%Oct 10, 2025
- High8.7Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.Check if you run itEPSS 0.24%Oct 7, 2025
- Medium5.4Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked.Check if you run itEPSS 0.28%Oct 7, 2025
- High8.2CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/_bulk endpoint.Check if you run itEPSS 0.37%Oct 7, 2025
- High8.5Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsysCheck if you run itEPSS 2.77%Oct 7, 2025
- Medium6.5Incorrect authorization in Kibana can lead to privilege escalation via the built-in reporting_user role which incorrectly has the ability to access all Kibana Spaces.Check if you run itEPSS 0.28%Aug 28, 2025
- Medium5.3diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration form.Check if you run itEPSS 0.33%Aug 27, 2025
- Medium4.3URL redirection to an untrusted site ('Open Redirect') in Kibana can lead to sending a user to an arbitrary site and server-side request forgery via a specially crafted URL.Check if you run itEPSS 0.44%Jun 25, 2025
- High7.6Improper authorization in Kibana can lead to privilege abuse via a direct HTTP request to a Synthetic monitor endpoint.Check if you run itEPSS 0.44%Jun 10, 2025
- UnknownElastic Elasticsearch Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 94.79%May 27, 2025
- Critical9.1A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.Check this weekEPSS 22.35%May 6, 2025
- Medium6.5Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the ElastCheck if you run itEPSS 0.65%May 1, 2025
- Medium5.4Unrestricted upload of a file with dangerous type in Kibana can lead to arbitrary JavaScript execution in a victim’s browser (XSS) via crafted HTML and JavaScript files.Check if you run itEPSS 0.35%May 1, 2025
- Medium4.3Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validatioCheck if you run itEPSS 0.34%May 1, 2025
- Medium6.2Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to tCheck if you run itEPSS 0.20%May 1, 2025
- UnknownElastic Kibana External Control of File Name or PathPatch nowKEVEPSS 84.29%Nov 13, 2023
- Critical10.0Kibana Arbitrary Code ExecutionPatch nowKEVEPSS 95.34%Mar 25, 2019