Login Request a demo
AS
Product
Apm Server
by Elastic · last CVE Sep 2, 2026
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apm Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-23448
7.5
1%
Feb 7
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain…
Affected: before 8.12.1
CVE-2023-31421
7.5
0%
Oct 26
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP…
Affected: 8.0.0 through 8.9.2
CVE-2024-37286
6.5
0%
Aug 3
APM server logs contain document body from a partially failed bulk index request
Affected: before 8.14.0
CVE-2026-78594
4.9
0%
Sep 2
Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service
Affected: 8.0.0 through 8.19.19; 9.0.0 through 9.4.4; 9.5.0
Showing 4