Skip to content

Elastic security advisories

119 advisories · 22 critical or high in 12 months · latest Sep 3

60 of 119 advisories

Advisory
Elastic Kibana: improper authorization
Medium4.3Sep 3
Elastic Kibana: improper authorization
Medium6.5Sep 3
Elastic Kibana: improper authorization
High8.1Sep 3
Elastic Kibana: improper authorization
High8.1Sep 3
Elastic Kibana: code injection
Medium4.3Sep 3
Elastic Kibana: missing authorization
Medium4.3Sep 3
Elastic Kibana: missing authorization
Medium4.3Sep 3
Elastic Kibana: improper authorization
Medium4.3Sep 2
Elastic Kibana: path traversal
Medium6.5Sep 2
Elastic Eck Operator: incomplete cleanup
Low3.5Sep 2
Elastic Kibana: missing authorization
Medium5.5Sep 2
Elastic Maps Server: path traversal
Medium5.3Sep 2
Elastic Agent: insecure permissions
High7.8Sep 2
Elastic Eck Operator: improper authorization
Medium5.4Sep 2
Elastic Kibana: denial of service
Medium6.5Sep 2
Elastic Fleet Server: improper authorization
Low3.1Sep 2
Elastic Filebeat: denial of service
Medium6.5Sep 2
Elastic Kibana: path traversal
High7.3Sep 2
Elastic Kibana: path traversal
Medium6.3Sep 2
Elastic Apm Server: denial of service
Medium4.9Sep 2
Elastic Kibana: improper authorization
Medium5.4Sep 2
Elastic Kibana: information disclosure
Medium4.3Sep 2
Elasticsearch: missing authorization
Medium5.4Sep 1
Elastic Kibana: missing authorization
Medium6.5Sep 1
Elastic Kibana: path traversal
High7.3Sep 1
Elastic Kibana: missing authorization
Medium4.3Sep 1
Elastic Kibana: missing authorization
Medium4.3Sep 1
Elasticsearch: request smuggling
Medium5.9Sep 1
Elastic Kibana: improper authorization
Medium4.2Sep 1
Elastic Kibana: information disclosure
Medium6.5Sep 1
Elastic Kibana: denial of service
Medium6.5Sep 1
Elastic Kibana: denial of service
Medium6.5Sep 1
Elastic Kibana: improper authorization
Medium4.3Sep 1
Elastic Kibana: improper authorization
Medium5.4Sep 1
Elastic Kibana: denial of service
Medium6.5Sep 1
Elasticsearch: unsafe deserialization
High8.8Sep 1
Elastic Kibana: denial of service
Medium6.5Sep 1
Elastic Kibana: improper authorization
High8.3Sep 1
Elastic Kibana: information disclosure
Medium6.5Sep 1
Elasticsearch: denial of service
Medium4.9Sep 1
Elastic Kibana: denial of service
Medium6.5Sep 1
Elastic Security: denial of service
High7.2Sep 1
Elastic Kibana: insecure direct object reference
Medium4.2Aug 25
Elasticsearch: denial of service
Medium6.5Aug 13
A flaw in Elasticsearch
Medium4.3Aug 13
Elasticsearch: denial of service
Medium6.5Aug 13
Elasticsearch: denial of service
Medium6.5Aug 13
Elastic Kibana: denial of service
Medium6.5Aug 13
Elastic Kibana: missing authorization
High7.1Aug 13
Elastic Fleet Server: code injection
Medium6.5Aug 13
Elastic Kibana: path traversal
High7.3Aug 13
Elasticsearch: denial of service
Medium6.5Aug 13
Elasticsearch: denial of service
Medium6.5Aug 13
Elastic Kibana: insecure direct object reference
Medium6.5Aug 13
Elastic Kibana: privilege escalation
Medium6.5Aug 13
Elasticsearch: denial of service
Medium6.5Aug 13
Elastic Kibana: missing authorization
High8.1Aug 13
Elastic Kibana: insecure direct object reference
Medium6.8Aug 13
Elastic Kibana: denial of service
Medium6.5Aug 13
Elastic Kibana: missing authorization
High7.6Aug 13
About Elastic

Security advisories Elastic publishes for its own products.

Elastic elsewhere on fru.dev: Acquisitions · Quarterly · Paydays · Releases · Repos · TechConf

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.