5.7
Medium
CVE-2024-11994 APM server logs could contain parts of the document body from a partially failed bulk index request
Description
APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| APM Server 8.0 | 8.0.0 → < 8.16.1 | 8.16.1 |
References
- discuss.elastic.co discuss.elastic.co
Timeline
- Published
- Last modified
Other CVEs of APM Server
The 8 CVEs of APM Server →
CVE-2026-115716
Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized…
6.5
Medium
CVE-2026-115289
Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a…
4.3
Medium
CVE-2026-78594
Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via…
4.9
Medium
CVE-2025-0712
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory…
7.0
High