Login Request a demo
LO
Product
Logstash
by Elasticsearch · last CVE Sep 25, 2017
3
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Logstash to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-14730
7.8
0%
Sep 25
The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users…
Affected: 5.0.0; 5.0.1; 5.0.2; 5.1.1; 5.1.2; 5.2.0; +11 more
CVE-2015-5378
7.5
2%
Jun 27
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server
Affected: 1.4.3; 1.5.0; 1.5.1; 1.5.2
CVE-2015-5619
5.9
1%
Aug 9
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might…
Affected: 1.4.3; 1.4.4; 1.5.0; 1.5.1; 1.5.2; 1.5.3
Showing 3