| CVE-2026-115716 |
Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized…
|
6.5
Moyenne
|
3 nov. 2026 |
| CVE-2026-115289 |
Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a…
|
4.3
Moyenne
|
3 nov. 2026 |
| CVE-2026-78594 |
Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via…
|
4.9
Moyenne
|
2 sept. 2026 |
| CVE-2025-0712 |
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory…
|
7.0
Élevée
|
30 juil. 2025 |
| CVE-2024-11994 |
APM server logs could contain parts of the document body from a partially failed bulk index request
|
5.7
Moyenne
|
1 mai 2025 |
| CVE-2024-37286 |
APM server logs contain document body from a partially failed bulk index request
|
5.7
Moyenne
|
3 août 2024 |
| CVE-2024-23448 |
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that…
|
5.7
Moyenne
|
7 févr. 2024 |
| CVE-2023-31421 |
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify…
|
5.9
Moyenne
|
26 oct. 2023 |