WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Vendor elastic✕Has a public PoC✕
Overview 9 matches · 4 in Waratek scope · 2 protected · 4 exploited · 3 CISA KEV · 6 EPSS ≥ 0.5
9matches 4in Waratek scope44.4% 2protected22.2% 4exploited44.4% 3CISA KEV33.3% 6EPSS ≥ 0.566.7%
Protected by Waratek 2 22.2% Rule in development 0 0.0% Mitigation candidate 2 22.2% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 5 55.6% Withdrawn CVE 0 0.0%
Critical 3 33.3% High 4 44.4% Medium 2 22.2% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 22.2% partly blocked 0 0.0% not blocked 7 77.8% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 44.4% Working exploit published 3 33.3% Proof of concept only 2 22.2% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 5Mitigation candidate: 2Protected by Waratek: 2 Medium: 2High: 4Critical: 3 not blocked: 7blocked by ARMR today: 2 Proof of concept only: 2Working exploit published: 3Exploited: 4
20141 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20151 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20160 20170 20181 Not applicable1 Critical1 not blocked1 Exploited1 20192 Not applicable2 Critical1 Medium1 not blocked2 Exploited1 Proof of concept only1 20201 Not applicable1 High1 not blocked1 Working exploit published1 20212 Mitigation candidate1 Not applicable1 High1 Medium1 not blocked2 Working exploit published2 20220 20231 Mitigation candidate1 High1 not blocked1 Proof of concept only1
2014201520162017201820192020202120222023
9 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-31419 High 2023-10-26 Mitigation candidate Proof of concept only A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.
CVE-2021-22146 High 2021-07-21 Not applicable Working exploit published All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no permissions and is unable to successfully query any Elasticsearch APIs, an attacker could leverage the anonymous user to gain insight into certain details of a deployed cluster.
CVE-2021-22145 Medium 2021-07-21 Mitigation candidate Working exploit published A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.
CVE-2020-7012 High 2020-06-03 Not applicable Working exploit published Kibana versions 6.7.0 to 6.8.8 and 7.0.0 to 7.6.2 contain a prototype pollution flaw in the Upgrade Assistant. An authenticated attacker with privileges to write to the Kibana index could insert data that would cause Kibana to execute arbitrary code. This could possibly lead to an attacker executing code with the permissions of the Kibana process on the host system.
CVE-2019-7616 Medium 2019-07-30 Not applicable Proof of concept only Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with administrative Kibana access could set the timelion:graphite.url configuration option to an arbitrary URL. This could possibly lead to an attacker accessing external URL resources as the Kibana process on the host system.
CVE-2019-7609 Critical 2019-03-25 Not applicable Exploited Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
CVE-2018-17246 Critical 2018-12-20 Not applicable Exploited Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.
CVE-2015-1427 Critical 2015-02-17 Protected by Waratek Exploited The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
CVE-2014-3120 High 2014-07-28 Protected by Waratek Exploited The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.