Elastic 漏洞

时间轴

类型

Not Defined41
Cloud Software6
Programming Language Software3
Ruby Gem1

产品

Elastic Kibana11
Elastic Elasticsearch5
Elastic Cloud Enterprise5
Elastic Endpoint Security4
Elastic Enterprise Search3

修正

Official Fix38
Temporary Fix0
Workaround0
Unavailable0
Not Defined13

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined51

访问向量

Not Defined0
Physical0
Local5
Adjacent21
Network25

身份验证

Not Defined0
High6
Low39
None6

用户交互

Not Defined0
Required3
None48

C3BM Index

CVSSv3 Base

≤10
≤20
≤34
≤42
≤54
≤620
≤711
≤85
≤95
≤100

CVSSv3 Temp

≤10
≤20
≤34
≤42
≤55
≤620
≤710
≤85
≤95
≤100

VulDB

≤10
≤20
≤37
≤414
≤512
≤68
≤73
≤82
≤95
≤100

NVD

≤10
≤20
≤30
≤41
≤53
≤64
≤710
≤815
≤96
≤101

CNA

≤10
≤20
≤31
≤41
≤51
≤67
≤79
≤83
≤93
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k18
<2k26
<5k7
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k43
<2k8
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (24): APM .NET Agent (1), APM Agent (1), APM Java Agent (2), APM Server (2), Agent (2), Beats (2), Cloud (1), Cloud Enterprise (5), Code (2), Elasticsearch (5), Endgame (1), Endpoint (1), Endpoint Security (4), Enterprise Search (3), Enterprise Search App (2), Filebeat (1), Fleet Server (2), Hadoop (1), Kibana (11), Logstash (1), Network Drive Connector (1), Sharepoint Online Python Connector (1), Stack (1), X-Pack Security (2)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2024-02-085.65.5Elastic APM Server Error 信息公开未知Not DefinedOfficial Fix0.000870.03CVE-2024-23448
2024-02-075.45.3Elastic Kibana Detection Engine Search API .alerts-security.alerts-{space_id} 权限升级未知Not DefinedOfficial Fix0.000490.05CVE-2024-23446
2024-02-075.04.9Elastic Network Drive Connector 权限升级未知Not DefinedOfficial Fix0.000490.02CVE-2024-23447
2023-12-135.75.7Elastic Kibana 信息公开未知Not DefinedOfficial Fix0.000490.05CVE-2023-46675
2023-12-132.62.5Elastic Elasticsearch Watcher Search 信息公开未知Not DefinedOfficial Fix0.000000.03CVE-2023-49921
2023-12-125.65.6Elastic Enterprise Search Documents API 信息公开未知Not DefinedOfficial Fix0.000490.00CVE-2023-49923
2023-12-125.65.6Elastic Agent HTTP Status Code 信息公开未知Not DefinedOfficial Fix0.000490.05CVE-2023-6687
2023-12-125.65.6Elastic Beats HTTP Status Code 信息公开未知Not DefinedOfficial Fix0.000490.03CVE-2023-49922
2023-12-055.95.9Elastic Hadoop 权限升级未知Not DefinedOfficial Fix0.000450.06CVE-2023-46674
2023-11-245.35.2Elastic Kibana Error 信息公开未知Not DefinedOfficial Fix0.000490.05CVE-2023-46671

41 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 41 results.

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!