Login Request a demo
LO
Product
Logstash
by Elastic · last CVE Apr 8, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 5Medium 3Low 1
Severity
All severities13Critical2High5Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Logstash to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-7620
7.5
2%
Oct 30
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
Affected: 6.0.0 before 6.8.4; 7.0.0 before 7.4.1
CVE-2015-5378
7.5
2%
Jun 27
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server
Affected: 1.4.0; 1.4.1; 1.4.2
CVE-2016-10363
7.5
2%
Jun 16
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of…
Affected: through 2.3.2
CVE-2016-1000222
7.5
1%
Jun 16
Logstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data
Affected: through 2.1.1
CVE-2016-1000221
7.5
2%
Jun 16
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information
Affected: through 2.3.3
Showing 5