Known vulnerabilities in the org.elasticsearch:elasticsearch package. This does not include vulnerabilities belonging to this package’s dependencies.
Arbitrary Code Execution
[,1.2.0)
Not available
26 Nov, 2019
Information Disclosure
[7.0.0,7.4.0),[6.0.0, 6.8.4)
Not available
30 Oct, 2019
Information Exposure
[6.0.0, 6.3.0)
Not available
02 Sep, 2019
Information Exposure
[5.6.0, 5.6.12),[6.0.0, 6.4.1)
Not available
02 Sep, 2019
Information Exposure
[6.4.0, 6.4.3)
Not available
02 Sep, 2019
XML External Entity (XXE) Injection
[6.5.0, 6.5.2)
Not available
02 Sep, 2019
Privilege Escalation
[,5.6.15),[6.0.0, 6.6.1)
Not available
02 Sep, 2019
Race Condition
[,6.8.2),[7.0.0, 7.2.1)
Not available
02 Sep, 2019
Information Exposure
[6.0.0, 6.3.0)
Not available
19 Sep, 2018
Cross-site Scripting (XSS)
[,1.4.0.Beta1)
Not available
25 Dec, 2016
Directory Traversal
[,1.4.5),[1.5.0,1.5.2)
Not available
09 Jun, 2016
Arbitrary Code Execution
[,1.6.1)
Not available
16 Jul, 2015
Directory Traversal
[,1.6.1)
Not available
16 Jul, 2015
Arbitrary Code Execution
[,1.6.0)
Not available
10 Jun, 2015
Improper Access Control
[0.6.0,1.3.8),[1.4.0,1.4.3)
Not available
18 Feb, 2015
Support the originator by clicking the read the rest link below.
