Elastic known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 3 Elastic vulnerabilities: 0 added in the last 365 days, 2 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added Mar 25, 2022.
RSS feed for Elastic exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2022-03-25 | CVE-2014-3120 | Elasticsearch Remote Code Execution Vulnerability | 8.1 (v3.1) | 88.6% | 2022-04-15 | Unknown |
| 2022-03-25 | CVE-2015-1427 | Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability | 9.8 (v3.1) | >99.9% | 2022-04-15 | Unknown |
| 2022-01-10 | CVE-2019-7609 | Kibana Arbitrary Code Execution | 10 (v3.1) | 95.3% | 2022-07-10 | Unknown |