Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
elastic vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-31416
Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requests to an APM Server being accepted and the data ingested into this APM deployment.
Elastic Elastic Cloud On Kubernetes
Elastic Apm Server
NA
CVE-2022-23715
A flaw exists in ECE prior to 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in the Logging and Monitoring cluster. The affected APIs are PATCH /ap...
Elastic Elastic Cloud Enterprise
NA
CVE-2022-23716
A flaw exists in ECE prior to 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.
Elastic Elastic Cloud Enterprise
NA
CVE-2022-38774
An issue exists in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Elastic Endgame
Elastic Endpoint Security
NA
CVE-2022-38777
An issue exists in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
Elastic Endgame
Elastic Endpoint Security
312
VMScore
CVE-2018-3828
Elastic Cloud Enterprise (ECE) versions before 1.1.4 contain an information exposure vulnerability. It exists that certain exception conditions would result in encryption keys, passwords, and other security sensitive headers being leaked to the allocator logs. An attacker with ac...
Elastic Elastic Cloud Enterprise
383
VMScore
CVE-2020-7011
Elastic App Search versions prior to 7.7.0 contain a cross site scripting (XSS) flaw when displaying document URLs in the Reference UI. If the Reference UI injects a URL into a result, that URL will be rendered by the web browser. If an attacker is able to control the contents of...
Elastic Elastic App Search
516
VMScore
CVE-2016-0928
Multiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime prior to 1.6.30 and 1.7.x prior to 1.7.8 allow remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Pivotal Cloud Foundry Elastic Runtime 1.7.0
Pivotal Cloud Foundry Elastic Runtime 1.7.7
Pivotal Cloud Foundry Elastic Runtime
Pivotal Cloud Foundry Elastic Runtime 1.7.3
Pivotal Cloud Foundry Elastic Runtime 1.7.4
Pivotal Cloud Foundry Elastic Runtime 1.7.1
Pivotal Cloud Foundry Elastic Runtime 1.7.2
Pivotal Cloud Foundry Elastic Runtime 1.7.5
Pivotal Cloud Foundry Elastic Runtime 1.7.6
445
VMScore
CVE-2017-4955
An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.65, 1.7.x versions before 1.7.48, 1.8.x versions before 1.8.28, and 1.9.x versions before 1.9.5. Several credentials were present in the logs for the Notifications errand in the PCF Elastic Runtime tile.
Pivotal Software Cloud Foundry Elastic Runtime 1.9.2
Pivotal Software Cloud Foundry Elastic Runtime 1.9.1
Pivotal Software Cloud Foundry Elastic Runtime 1.8.27
Pivotal Software Cloud Foundry Elastic Runtime 1.8.26
Pivotal Software Cloud Foundry Elastic Runtime 1.8.12
Pivotal Software Cloud Foundry Elastic Runtime 1.8.11
Pivotal Software Cloud Foundry Elastic Runtime 1.8.10
Pivotal Software Cloud Foundry Elastic Runtime 1.8.9
Pivotal Software Cloud Foundry Elastic Runtime 1.7.42
Pivotal Software Cloud Foundry Elastic Runtime 1.7.41
Pivotal Software Cloud Foundry Elastic Runtime 1.7.40
Pivotal Software Cloud Foundry Elastic Runtime 1.7.39
Pivotal Software Cloud Foundry Elastic Runtime 1.7.26
Pivotal Software Cloud Foundry Elastic Runtime 1.7.25
Pivotal Software Cloud Foundry Elastic Runtime 1.7.24
Pivotal Software Cloud Foundry Elastic Runtime 1.7.23
Pivotal Software Cloud Foundry Elastic Runtime 1.7.22
Pivotal Software Cloud Foundry Elastic Runtime 1.7.9
Pivotal Software Cloud Foundry Elastic Runtime 1.7.8
Pivotal Software Cloud Foundry Elastic Runtime 1.7.7
Pivotal Software Cloud Foundry Elastic Runtime 1.7.6
Pivotal Software Cloud Foundry Elastic Runtime 1.6.56
668
VMScore
CVE-2017-2773
An issue exists in Pivotal PCF Elastic Runtime 1.6.x versions before 1.6.60, 1.7.x versions before 1.7.41, 1.8.x versions before 1.8.23, and 1.9.x versions before 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged malicious users to impers...
Pivotal Software Cloud Foundry Elastic Runtime 1.8.17
Pivotal Software Cloud Foundry Elastic Runtime 1.8.15
Pivotal Software Cloud Foundry Elastic Runtime 1.8.10
Pivotal Software Cloud Foundry Elastic Runtime 1.8.8
Pivotal Software Cloud Foundry Elastic Runtime 1.8.1
Pivotal Software Cloud Foundry Elastic Runtime 1.7.39
Pivotal Software Cloud Foundry Elastic Runtime 1.7.32
Pivotal Software Cloud Foundry Elastic Runtime 1.7.30
Pivotal Software Cloud Foundry Elastic Runtime 1.7.25
Pivotal Software Cloud Foundry Elastic Runtime 1.7.23
Pivotal Software Cloud Foundry Elastic Runtime 1.7.16
Pivotal Software Cloud Foundry Elastic Runtime 1.7.14
Pivotal Software Cloud Foundry Elastic Runtime 1.7.7
Pivotal Software Cloud Foundry Elastic Runtime 1.7.5
Pivotal Software Cloud Foundry Elastic Runtime 1.6.59
Pivotal Software Cloud Foundry Elastic Runtime 1.6.57
Pivotal Software Cloud Foundry Elastic Runtime 1.6.50
Pivotal Software Cloud Foundry Elastic Runtime 1.6.48
Pivotal Software Cloud Foundry Elastic Runtime 1.6.41
Pivotal Software Cloud Foundry Elastic Runtime 1.6.39
Pivotal Software Cloud Foundry Elastic Runtime 1.6.34
Pivotal Software Cloud Foundry Elastic Runtime 1.6.32
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »