target entity

Elastic

3 source-linked records in the current knowledge graph.

Mar 25, 2022high

CVE-2015-1427: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands. Required action: Apply updates per vendor instructions.

CVE-2015-1427EPSS 99.9%ElasticElasticsearch

CISA KEV ↗ · unattributed attribution

Mar 25, 2022high

CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code. Required action: Apply updates per vendor instructions.

CVE-2014-3120EPSS 88.6%ElasticElasticsearch

CISA KEV ↗ · unattributed attribution

Jan 10, 2022high

CVE-2019-7609: Kibana Arbitrary Code Execution

Kibana contain an arbitrary code execution flaw in the Timelion visualizer. Required action: Apply updates per vendor instructions.

CVE-2019-7609EPSS 95.3%ElasticKibana

CISA KEV ↗ · unattributed attribution