ZeusQA
Start free

Known exploited vulnerabilities

Elastic vulnerabilities attackers have used

Every Elastic vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 Elastic vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2015-1427, added Mar 25, 2022. Elasticsearch has the most entries (2).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

Elasticsearch (2), Kibana (1).

Every Elastic entry in CISA KEV

  1. CVE-2015-1427

    Added · due

    Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

    The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

  2. CVE-2014-3120

    Added · due

    Elasticsearch Remote Code Execution Vulnerability

    Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

  3. CVE-2019-7609

    Added · due

    Kibana Arbitrary Code Execution

    Kibana contain an arbitrary code execution flaw in the Timelion visualizer.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works