| CVE-2026-115716 |
Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized…
|
6.5
Medium
|
Nov 3, 2026 |
| CVE-2026-115289 |
Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a…
|
4.3
Medium
|
Nov 3, 2026 |
| CVE-2026-78594 |
Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via…
|
4.9
Medium
|
Sep 2, 2026 |
| CVE-2025-0712 |
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory…
|
7.0
High
|
Jul 30, 2025 |
| CVE-2024-11994 |
APM server logs could contain parts of the document body from a partially failed bulk index request
|
5.7
Medium
|
May 1, 2025 |
| CVE-2024-37286 |
APM server logs contain document body from a partially failed bulk index request
|
5.7
Medium
|
Aug 3, 2024 |
| CVE-2024-23448 |
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that…
|
5.7
Medium
|
Feb 7, 2024 |
| CVE-2023-31421 |
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify…
|
5.9
Medium
|
Oct 26, 2023 |