Elastic Elasticsearch X-pack — known CVE vulnerabilities

Every CVE whose affected-product data names Elastic Elasticsearch X-pack, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-3824 — CVSS 6.1 (medium): X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. If an attacker is able to inject…
• CVE-2018-3823 — CVSS 5.4 (medium): X-Pack Machine Learning versions before 6.2.4 and 5.6.9 had a cross-site scripting (XSS) vulnerability. Users with manage_ml permissions…