WaratekVRT Sign in
Reset
More filters (1)
Columns
Product: Elasticsearch✕
Overview 6 matches · 3 exploited · 2 CISA KEV · 4 public PoC · 3 EPSS ≥ 0.5
6matches 3exploited50.0% 2CISA KEV33.3% 4public PoC66.7% 3EPSS ≥ 0.550.0%
Protected by Waratek 6 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 1 16.7% High 2 33.3% Medium 3 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 6 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 50.0% Working exploit published 1 16.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 33.3%
split by peak 3 / year
Protected by Waratek: 6 Medium: 3High: 2Critical: 1 blocked by ARMR today: 6 No public exploit: 2Working exploit published: 1Exploited: 3
20141 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20153 Protected by Waratek3 Critical1 Medium2 blocked by ARMR today3 Exploited2 Working exploit published1 20160 20170 20181 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 20190 20200 20210 20220 20231 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1
2014201520162017201820192020202120222023
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-46674 High 2023-12-05 Protected by Waratek No public exploit An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue.
CVE-2018-17247 Medium 2018-12-20 Protected by Waratek No public exploit Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content of local files on the Elasticsearch node. This could allow a user to access information that they should not have access to.
CVE-2015-5531 Medium 2015-08-17 Protected by Waratek Exploited Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
CVE-2015-3337 Medium 2015-05-01 Protected by Waratek Working exploit published Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2015-1427 Critical 2015-02-17 Protected by Waratek Exploited The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
CVE-2014-3120 High 2014-07-28 Protected by Waratek Exploited The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.