Login Request a demo
LO
Product
Logstash
by Elastic · last CVE Apr 8, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 5Medium 3Low 1
Severity
All severities13Critical2High5Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Logstash to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-3817
6.5
1%
Mar 30
When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information
Affected: before 5.6.6; 6.0.0 before 6.1.2
CVE-2015-5619
5.9
1%
Aug 9
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might…
Affected: 1.4.0; 1.4.1; 1.4.2
CVE-2023-46672
5.5
0%
Nov 15
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances
Affected: 8.10.0 before 8.11.1; 7.12.1
Showing 3