Product by Elastic

    Apm Server

    8 known vulnerabilities in Apm Server (Elastic), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apm Server (Elastic)
    MediumCVE-2026-115716

    Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service

    		6.5
    MediumCVE-2026-78594

    Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

    		4.9
    HighCVE-2024-23448

    APM Server Insertion of Sensitive Information into Log File

    also in 1 other product

    		5.7
    MediumCVE-2026-115289

    Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

    		4.3
    MediumCVE-2024-37286

    APM Server Insertion of Sensitive Information into Log File

    also in 1 other product

    		5.7
    HighCVE-2025-0712

    Elastic APM Server: Uncontrolled Search Path Element

    		7.0
    MediumCVE-2024-11994

    APM Server Insertion of Sensitive Information into Log File

    		5.7
    HighCVE-2023-31421

    Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue

    also in 3 other products

    		5.9

    All products by Elastic