Elastic 漏洞

时间轴

类型

Not Defined18
Cloud Software5
Programming Language Software1
Ruby Gem1

产品

Elastic Cloud Enterprise5
Elastic Kibana4
Elastic Endpoint Security4
Elastic Code2
Elastic Enterprise Search2

修正

Official Fix16
Temporary Fix0
Workaround0
Unavailable0
Not Defined9

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined25

访问向量

Not Defined0
Physical0
Local2
Adjacent10
Network13

身份验证

Not Defined0
High1
Low21
None3

用户交互

Not Defined0
Required2
None23

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤41
≤53
≤67
≤74
≤83
≤95
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤41
≤54
≤66
≤74
≤83
≤95
≤100

VulDB

≤10
≤20
≤32
≤44
≤56
≤66
≤71
≤81
≤95
≤100

NVD

≤10
≤20
≤30
≤41
≤51
≤63
≤74
≤87
≤94
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k5
<2k13
<5k7
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k20
<2k5
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (12): APM Agent (1), APM Java Agent (1), Cloud Enterprise (5), Code (2), Endgame (1), Endpoint Security (4), Enterprise Search (2), Enterprise Search App (2), Filebeat (1), Kibana (4), Stack (1), X-Pack Security (2)

已发布BaseTemp漏洞Prod易修正CTIEPSSCVE
2023-09-078.88.4Elastic Code SetHostIPv6StaticSettings 内存损坏未知Not DefinedOfficial Fix0.350.00000CVE-2023-41211
2023-05-053.43.4Elastic Filebeat httpjson 信息公开未知Not DefinedNot Defined0.000.00043CVE-2023-31413
2023-05-057.17.1Elastic Kibana Uptime/Synthetics 权限升级未知Not DefinedNot Defined0.070.00054CVE-2023-31415
2023-05-057.17.1Elastic Kibana Configuration 权限升级未知Not DefinedNot Defined0.070.00054CVE-2023-31414
2023-02-225.55.5Elastic Kibana URL Redirect未知Not DefinedNot Defined0.070.00046CVE-2022-38779
2023-02-098.38.3Elastic Endpoint Security 权限升级未知Not DefinedNot Defined0.050.00043CVE-2022-38777
2023-02-095.85.7Elastic Kibana 拒绝服务未知Not DefinedOfficial Fix0.030.00044CVE-2022-38778
2023-01-278.38.3Elastic Endpoint Security 权限升级未知Not DefinedNot Defined0.000.00043CVE-2022-38775
2023-01-278.38.3Elastic Endpoint Security/Endgame 权限升级未知Not DefinedNot Defined0.050.00043CVE-2022-38774
2022-09-294.44.3Elastic Cloud Enterprise SAML 信息公开Cloud SoftwareNot DefinedOfficial Fix0.040.00050CVE-2022-23716

15 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 15 results.

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!