How many elastic org.elasticsearch:elasticsearch CVEs are in CISA KEV?

Yes — 1 of elastic org.elasticsearch:elasticsearch's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for elastic org.elasticsearch:elasticsearch vulnerabilities?

Yes — 1 of elastic org.elasticsearch:elasticsearch's CVEs have a known public exploit.

Which versions of elastic org.elasticsearch:elasticsearch are affected?

86 distinct elastic org.elasticsearch:elasticsearch versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in elastic org.elasticsearch:elasticsearch CVEs?

elastic org.elasticsearch:elasticsearch's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-270 (Privilege Context Switching Error).

What is the average severity of elastic org.elasticsearch:elasticsearch CVEs?

The average CVSS base score across elastic org.elasticsearch:elasticsearch's scored CVEs is 6.5.

elastic org.elasticsearch:elasticsearch Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: elastic org.elasticsearch:elasticsearch vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

elastic org.elasticsearch:elasticsearch Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

elastic org.elasticsearch:elasticsearch has 25 published CVE records since 2014, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting elastic org.elasticsearch:elasticsearch, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of elastic org.elasticsearch:elasticsearch's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High9

Medium14

Low1

In CISA’s Known Exploited Vulnerabilities catalog

One of elastic org.elasticsearch:elasticsearch's CVEs is confirmed exploited in the wild.

Public exploits

One of elastic org.elasticsearch:elasticsearch's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every elastic org.elasticsearch:elasticsearch version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.4.0.Beta11 CVE
< 5.6.151 CVE
< 6.8.121 CVE
< 6.8.131 CVE
< 6.8.141 CVE
< 6.8.151 CVE
< 6.8.21 CVE
< 7.17.161 CVE
< 7.17.211 CVE
< 7.17.231 CVE
< 7.17.251 CVE
6.0.0 <= v < 6.6.11 CVE

Common weakness types

The CWE weakness categories most often found in elastic org.elasticsearch:elasticsearch CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many elastic org.elasticsearch:elasticsearch CVEs were published each year.

2014

2019

2020

2021

2022

2023

2024

Other elastic products

Browse vulnerabilities for other products by elastic.

kibana181 CVEs elasticsearch110 CVEs logstash16 CVEs beats12 CVEs elastic cloud enterprise10 CVEs x-pack9 CVEs Packetbeat7 CVEs APM Server6 CVEs

All elastic vulnerabilities

Frequently asked questions

Common questions about elastic org.elasticsearch:elasticsearch vulnerabilities.

How many CVEs does elastic org.elasticsearch:elasticsearch have?: elastic org.elasticsearch:elasticsearch has 25 published CVE records since 2014.
How many elastic org.elasticsearch:elasticsearch CVEs are in CISA KEV?: Yes — 1 of elastic org.elasticsearch:elasticsearch's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for elastic org.elasticsearch:elasticsearch vulnerabilities?: Yes — 1 of elastic org.elasticsearch:elasticsearch's CVEs have a known public exploit.
Which versions of elastic org.elasticsearch:elasticsearch are affected?: 86 distinct elastic org.elasticsearch:elasticsearch versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in elastic org.elasticsearch:elasticsearch CVEs?: elastic org.elasticsearch:elasticsearch's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-270 (Privilege Context Switching Error).
How many critical elastic org.elasticsearch:elasticsearch vulnerabilities are there?: elastic org.elasticsearch:elasticsearch has 1 critical and 9 high-severity CVEs.
What is the average severity of elastic org.elasticsearch:elasticsearch CVEs?: The average CVSS base score across elastic org.elasticsearch:elasticsearch's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track elastic org.elasticsearch:elasticsearch vulnerabilities

Monitor new elastic org.elasticsearch:elasticsearch vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing