Vendor

    Elastic

    19 known vulnerabilities in products by Elastic, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Elastic
    HighCVE-2015-4165

    Elasticsearch: Code Execution

    7.5
    HighCVE-2015-5378

    Elastic Logstash: security vulnerability

    also in 1 other product

    7.5
    HighCVE-2017-11480

    Elastic Packetbeat: Improper Resource Shutdown or Release

    also in 2 other products

    7.5
    Not ratedCVE-2015-5531

    Elasticsearch: Path Traversal

    —
    Not ratedCVE-2015-3337

    Elasticsearch: Path Traversal

    —
    MediumCVE-2020-7017

    Elastic Kibana: Cross-site Scripting

    also in 4 other products

    6.7
    MediumCVE-2015-5619

    Elastic Logstash: Information Disclosure

    also in 1 other product

    5.9
    MediumCVE-2016-10362

    Elastic Logstash: Insertion of Sensitive Information into Log File

    also in 1 other product

    6.5
    MediumCVE-2017-11479

    Elastic Kibana: Cross-Site Scripting (XSS)

    also in 1 other product

    6.1
    HighCVE-2026-26932

    Improper Validation of Array Index in Packetbeat Leading to Denial of Service

    also in 1 other product

    5.7
    MediumCVE-2020-7016

    Elastic Kibana: Incorrect Regular Expression

    also in 4 other products

    4.8
    MediumCVE-2025-68381

    Packetbeat Improper Bounds Check

    also in 1 other product

    6.5
    Not ratedCVE-2014-6439

    Elasticsearch: Cross-Site Scripting (XSS)

    —
    MediumCVE-2025-68388

    Elastic Packetbeat: Allocation of Resources Without Limits or Throttling

    also in 3 other products

    5.3
    MediumCVE-2017-8446

    Elastic X-Pack Reporting: Insufficiently Protected Credentials

    also in 1 other product

    5.3
    MediumCVE-2017-8444

    Elastic Cloud Enterprise: Cleartext Transmission of Sensitive Information

    also in 1 other product

    5.9
    MediumCVE-2025-68382

    Packetbeat Out-of-bounds Read

    also in 1 other product

    6.5
    MediumCVE-2026-26933

    Improper Validation of Array Index in Packetbeat Leading to Denial of Service

    also in 2 other products

    5.7
    HighCVE-2017-14730

    Elastic Logstash: Privilege Escalation

    7.8

    Products

    Products by Elastic
    Elastic Packetbeat60
    Elasticsearch40
    Kibana30
    Logstash30