Vulnerabilities (CVE)

Filtered by vendor Elastic Subscribe
Filtered by product Elasticsearch
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-52979 1 Elastic 1 Elasticsearch 2025-10-02 N/A 6.5 MEDIUM
Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.
CVE-2015-5377 1 Elastic 1 Elasticsearch 2024-11-21 7.5 HIGH 9.8 CRITICAL
Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability