Elastic Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	17
Cloud Software	5
Programming Language Software	1
Ruby Gem	1

Produkt

Elastic Cloud Enterprise	5
Elastic Kibana	4
Elastic Endpoint Security	4
Elastic Enterprise Search	2
Elastic Enterprise Search App	2

Przeciwdziałanie

Official Fix	15
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	9

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	24

Wektor dostępu

Not Defined	0
Physical	0
Local	2
Adjacent	9
Network	13

Uwierzytelnianie

Not Defined	0
High	1
Low	21
None	2

Interakcja z użytkownikiem

Not Defined	0
Required	2
None	22

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	2
≤4	1
≤5	3
≤6	9
≤7	4
≤8	1
≤9	4
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	2
≤4	1
≤5	4
≤6	8
≤7	4
≤8	1
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	2
≤4	4
≤5	6
≤6	6
≤7	1
≤8	1
≤9	4
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	3
≤7	4
≤8	7
≤9	2
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	5
<2k	13
<5k	6
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	20
<2k	3
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (12): APM Agent (1), APM Java Agent (1), Cloud Enterprise (5), Code (1), Endgame (1), Endpoint Security (4), Enterprise Search (2), Enterprise Search App (2), Filebeat (1), Kibana (4), Stack (1), X-Pack Security (2)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	CTI	EPSS	CVE
2023-05-05	3.5	3.5	Elastic Filebeat httpjson information disclosure	Nieznany	Not Defined	Not Defined	0.04	0.00043	CVE-2023-31413
2023-05-05	5.5	5.5	Elastic Kibana Uptime/Synthetics privilege escalation	Nieznany	Not Defined	Not Defined	0.03	0.00042	CVE-2023-31415
2023-05-05	5.5	5.5	Elastic Kibana Configuration privilege escalation	Nieznany	Not Defined	Not Defined	0.02	0.00042	CVE-2023-31414
2023-02-22	5.5	5.5	Elastic Kibana URL Redirect	Nieznany	Not Defined	Not Defined	0.03	0.00046	CVE-2022-38779
2023-02-09	8.3	8.3	Elastic Endpoint Security privilege escalation	Nieznany	Not Defined	Not Defined	0.03	0.00043	CVE-2022-38777
2023-02-09	5.8	5.7	Elastic Kibana denial of service	Nieznany	Not Defined	Official Fix	0.05	0.00044	CVE-2022-38778
2023-01-27	8.3	8.3	Elastic Endpoint Security privilege escalation	Nieznany	Not Defined	Not Defined	0.00	0.00043	CVE-2022-38775
2023-01-27	8.3	8.3	Elastic Endpoint Security/Endgame privilege escalation	Nieznany	Not Defined	Not Defined	0.02	0.00043	CVE-2022-38774
2022-09-29	4.4	4.3	Elastic Cloud Enterprise SAML information disclosure	Cloud Software	Not Defined	Official Fix	0.00	0.00046	CVE-2022-23716
2022-08-26	5.0	4.9	Elastic Cloud Enterprise user information disclosure	Cloud Software	Not Defined	Official Fix	0.08	0.00049	CVE-2022-23715

14 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!