Elastic — security vulnerabilities (CVEs)

Known CVE vulnerabilities affecting Elastic products, grouped by product. Select a product for the full CVE list with CVSS, EPSS, and CISA KEV signal.

Products (30)

• Kibana — 117 CVEs
• Elasticsearch — 50 CVEs
• Logstash — 13 CVEs
• Elastic Cloud Enterprise — 9 CVEs
• X-pack — 9 CVEs
• Endpoint Security — 6 CVEs
• Elastic Agent — 5 CVEs
• Enterprise Search — 5 CVEs
• Apm Agent — 3 CVEs
• Apm Server — 3 CVEs
• Elastic App Search — 2 CVEs
• Elastic Beats — 2 CVEs
• Elastic Cloud On Kubernetes — 2 CVEs
• Elasticsearch X-pack — 2 CVEs
• Endgame — 2 CVEs
• Filebeat — 2 CVEs
• Fleet Server — 2 CVEs
• Kibana X-pack — 2 CVEs
• Logstash X-pack — 2 CVEs
• Apm-agent-ruby — 1 CVEs
• Apm Java Agent — 1 CVEs
• Apm .net Agent — 1 CVEs
• Azure Repository — 1 CVEs
• Elastic Fleet Server — 1 CVEs
• Elastic Package Registry — 1 CVEs
• Elastic Sharepoint Online Python Connector — 1 CVEs
• Endpoint — 1 CVEs
• Kibana Reporting — 1 CVEs
• Network Drive Connector — 1 CVEs
• Winlogbeat — 1 CVEs