Login Request a demo
XP
Product
X-pack
by Elastic · last CVE Mar 30, 2018
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 3Medium 5Low 0
Severity
All severities9Critical1High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add X-pack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-8448
8.8
1%
Sep 29
An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that results in that user…
Affected: 5.0.0; 5.0.1; 5.0.2; 5.1.1; 5.2.0; 5.2.1; +9 more
CVE-2017-8438
8.8
1%
Jun 5
Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality
Affected: 5.0.0; 5.0.1; 5.0.2; 5.1.0; 5.1.1; 5.2.0; +7 more
CVE-2017-8450
7.5
1%
Jun 16
X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able…
Affected: 5.1.1
Showing 3