Vulnerabilidades en Elastic
396 resultadosCVE-2026-33460MEDIUMIncorrect Authorization in Kibana Fleet Leading to Information DisclosureEPSS 0.2%CVE-2026-115710MEDIUMUse of Cache Containing Sensitive Information in Elasticsearch Leading to Information DisclosureEPSS 0.2%CVE-2026-115708HIGHImproper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication BypassEPSS 0.2%CVE-2025-25011HIGHBeats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows InstallerEPSS 0.2%CVE-2017-8445—An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manEPSS 0.2%CVE-2024-37284MEDIUMElastic Defend Improper Handling of Alternate Encoding Leads to CrashEPSS 0.2%CVE-2026-115713HIGHImproper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data ModificationEPSS 0.2%CVE-2025-0712HIGHAPM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows InstallerEPSS 0.2%CVE-2026-78609MEDIUMIncorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of DataEPSS 0.1%CVE-2026-78604HIGHIncorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEMEPSS 0.1%CVE-2024-14047HIGHImproper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of ServiceEPSS 0.1%CVE-2026-42401MEDIUMImproper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML InjectionEPSS 0.1%CVE-2025-37735HIGHImproper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the DefenEPSS 0.1%CVE-2026-33467MEDIUMImproper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity BypassEPSS 0.1%CVE-2026-102413MEDIUMUncaught Exception in Elastic Endpoint Leading to Denial of ServiceEPSS 0.1%CVE-2026-115707MEDIUMInsertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege EscalationEPSS 0.1%