77 matches found
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
Elastic APM Server 8.x < 8.19.20 / 9.0.x < 9.4.5 / 9.5.x < 9.5.1 DoS (ESA-2026-152)
The version of Elastic APM Server installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-152 advisory. - Improper Handling of Highly Compressed Data CWE-409 in APM Server c...
CVE-2026-78594
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
EUVD-2026-70058
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
CVE-2026-78594
Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...
CVE-2026-78594: Improper Handling of Highly Compressed Data (Data Amplification)
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
PT-2026-84735
Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...
APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)
Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...
CVE-2026-78608
Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...
Kibana 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-144)
Missing Authorization in Kibana Leading to Information Disclosure Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana us...
GO-2025-4252 vulnerabilities
Vulnerabilities for packages: apm-server, elastic-agent, apm-server-fips, cloudbeat, beats-fips, cloudbeat-fips...
GO-2023-2413 vulnerabilities
Vulnerabilities for packages: apm-server, elastic-agent, apm-server-fips, cloudbeat, elastic-agent-fips, cloudbeat-fips...
GO-2026-4360 vulnerabilities
Vulnerabilities for packages: apm-server, apm-server-fips, cloudbeat, beats, cloudbeat-fips...
GO-2025-4253 vulnerabilities
Vulnerabilities for packages: apm-server, elastic-agent, apm-server-fips, cloudbeat, elastic-agent-fips, cloudbeat-fips...
Elastic APM Server 8.x < 8.16.1 Information Disclosure (ESA-2024-41)
The version of Elastic APM Server installed on the remote host is 8.x prior to 8.16.1. It is, therefore, affected by an information disclosure vulnerability: - APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the...
GHSA-W2GR-585J-R428 vulnerabilities
Vulnerabilities for packages: apm-server, apm-server-fips, cloudbeat, beats, cloudbeat-fips...