WaratekVRT Sign in
Reset
More filters (2)
Columns
Product: Elasticsearch✕Has a public PoC✕
Overview 6 matches · 4 protected · 3 exploited · 2 CISA KEV · 5 EPSS ≥ 0.5
6matches 4protected66.7% 3exploited50.0% 2CISA KEV33.3% 5EPSS ≥ 0.583.3%
Protected by Waratek 4 66.7% Rule in development 0 0.0% Mitigation candidate 2 33.3% No exploit published 0 0.0%
Critical 1 16.7% High 2 33.3% Medium 3 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 4 66.7% partly blocked 0 0.0% not blocked 2 33.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 50.0% Working exploit published 2 33.3% Proof of concept only 1 16.7% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 3 / year
Mitigation candidate: 2Protected by Waratek: 4 Medium: 3High: 2Critical: 1 not blocked: 2blocked by ARMR today: 4 Proof of concept only: 1Working exploit published: 2Exploited: 3
20141 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20153 Protected by Waratek3 Critical1 Medium2 blocked by ARMR today3 Exploited2 Working exploit published1 20160 20170 20180 20190 20200 20211 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20220 20231 Mitigation candidate1 High1 not blocked1 Proof of concept only1
2014201520162017201820192020202120222023
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-31419 High 2023-10-26 Mitigation candidate Proof of concept only A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
CVE-2021-22145 Medium 2021-07-21 Mitigation candidate Working exploit published A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.
CVE-2015-5531 Medium 2015-08-17 Protected by Waratek Exploited Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
CVE-2015-3337 Medium 2015-05-01 Protected by Waratek Working exploit published Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2015-1427 Critical 2015-02-17 Protected by Waratek Exploited The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
CVE-2014-3120 High 2014-07-28 Protected by Waratek Exploited The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.