target entity

Elasticsearch

2 source-linked records in the current knowledge graph.

Mar 25, 2022high

CVE-2015-1427: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands. Required action: Apply updates per vendor instructions.

CVE-2015-1427EPSS 99.9%ElasticElasticsearch

CISA KEV ↗ · unattributed attribution

Mar 25, 2022high

CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code. Required action: Apply updates per vendor instructions.

CVE-2014-3120EPSS 88.6%ElasticElasticsearch

CISA KEV ↗ · unattributed attribution