Elastic Apm Agent — known CVE vulnerabilities

Every CVE whose affected-product data names Elastic Apm Agent, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-37941 — CVSS 7.8 (high): A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an…
• CVE-2019-7617 — CVSS 7.2 (high): When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote…
• CVE-2021-22133 — CVSS 2.4 (low): The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details during an…