Elastic: exploited vulnerabilities
- 3exploited vulnerabilities
- 0used by ransomware
- Mar 25, 2022latest one added
- Elasticsearch 2
- Kibana 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Mar 25, 2022 | Groovy Scripting Engine Remote Code Execution | Elasticsearch | Critical 9.8 | 99.9% |
| Mar 25, 2022 | Remote Code Execution | Elasticsearch | High 8.1 | 89% |
| Jan 10, 2022 | Arbitrary Code Execution | Kibana | Critical 9.8 | 95% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.