Product by Elastic

Elastic Logstash

16 known vulnerabilities in Elastic Logstash (Elastic), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Elastic Logstash (Elastic)

Critical	CVE-2019-7612	Elastic Logstash: Generation of Error Message Containing Sensitive Information also in 1 other product	9.8	25.03.2019
High	CVE-2015-5378	Elastic Logstash: security vulnerability also in 1 other product	7.5	27.06.2017
High	CVE-2019-7620	Elastic Logstash: Uncontrolled Resource Consumption	7.5	30.10.2019
High	CVE-2016-1000221	Elastic Logstash: security vulnerability	7.5	16.06.2017
High	CVE-2016-10363	Elastic Logstash: Uncaught Exception	7.5	16.06.2017
High	CVE-2019-7613	Elastic Logstash: Insufficient Logging	7.5	25.03.2019
Critical	CVE-2026-33466	Elastic Logstash: Path Traversal also in 1 other product	8.1	08.04.2026
High	CVE-2016-1000222	Elastic Logstash: security vulnerability	7.5	16.06.2017
Medium	CVE-2015-5619	Elastic Logstash: Information Disclosure also in 1 other product	5.9	09.08.2017
Medium	CVE-2016-10362	Elastic Logstash: Insertion of Sensitive Information into Log File also in 1 other product	6.5	16.06.2017
Medium	CVE-2018-3817	Elastic Logstash: Insertion of Sensitive Information into Log File	6.5	30.03.2018
Not rated	CVE-2014-4326	Elastic Logstash: security vulnerability	—	22.07.2014
Not rated	CVE-2015-4152	Elastic Logstash: Path Traversal	—	15.06.2015
High	CVE-2023-46672	Logstash Insertion of Sensitive Information into Log File	8.4	15.11.2023
Medium	CVE-2025-37730	Logstash Improper Certificate Validation in TCP output	6.5	06.05.2025
Low	CVE-2021-22138	Elasticsearch: Improper Certificate Validation also in 1 other product	3.7	13.05.2021