dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

Elastic APM Server 8.x < 8.19.20 / 9.0.x < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-152)

The version of Elastic APM Server installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-152 advisory. - Improper Handling of Highly Compressed Data CWE-409 in APM Server c...

Elastic APM Server 8.x < 8.16.1 Information Disclosure (ESA-2024-41)

The version of Elastic APM Server installed on the remote host is 8.x prior to 8.16.1. It is, therefore, affected by an information disclosure vulnerability: - APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the...

Elastic APM Server 安全漏洞

Elastic APM Server is a lightweight Agent from the Dutch company Elastic. A security vulnerability exists in Elastic APM Server versions prior to 8.14.0, which stems from the server recording error logs that inadvertently record sensitive information, leading to a data leak...

Elastic APM Server Information Disclosure

The vulnerability of the server-based software for monitoring and analyzing application performance, Elastic APM Server, is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to compromise the confidentiality of the protected...

PT-2024-1696

Name of the Vulnerable Software and Affected Versions Elastic APM Server versions prior to 8.12.1 Description An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed, and that response would contain parts of t...

Elastic Beats TLS Certificate Validation

The vulnerability affects agents for data collection and delivery in Elasticsearch or Logstash Elastic Beats, agents for collecting metrics in Elastic Agent, server software for monitoring and analyzing application performance in Elastic APM Server, and server software for managing agents in...