GO-2025-4252 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, elastic-agent, cloudbeat-fips, beats-fips, apm-server...

GO-2023-2413 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, elastic-agent-fips, elastic-agent, cloudbeat-fips, apm-server...

GO-2026-4360 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, cloudbeat-fips, beats, apm-server...

GO-2025-4253 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, elastic-agent-fips, elastic-agent, cloudbeat-fips, apm-server...

Elastic APM Server 8.x < 8.16.1 Information Disclosure (ESA-2024-41)

The version of Elastic APM Server installed on the remote host is 8.x prior to 8.16.1. It is, therefore, affected by an information disclosure vulnerability: - APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the...

GHSA-W2GR-585J-R428 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, cloudbeat-fips, beats, apm-server...

CVE-2026-0528 vulnerabilities

Vulnerabilities for packages: apm-server-fips, cloudbeat, cloudbeat-fips, beats, apm-server...

EUVD-2024-0582

Malicious code in bioql PyPI...

EUVD-2025-13048

Malicious code in bioql PyPI...

EUVD-2024-2568

Malicious code in bioql PyPI...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, rclone, rancher, dapr, nri-haproxy, rabbitmq-cluster-operator, tempo, gcp-compute-persistent-disk-csi-driver, monstache, opa, rabbitmq-default-user-credential-updater, grafana-pyroscope, lazydocker, rke2-runtime, nri-memcached, tigera-operator,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, rclone, rancher, dapr, nri-haproxy, rabbitmq-cluster-operator, tempo, gcp-compute-persistent-disk-csi-driver, monstache, opa, rabbitmq-default-user-credential-updater, grafana-pyroscope, lazydocker, rke2-runtime, nri-memcached, tigera-operator,...

CVE-2025-0712

CVE-2025-0712 concerns Elastic APM Server on Windows and its installer. A local attacker could exploit an uncontrolled search path element caused by insecure directory permissions during Windows installer usage, enabling local privilege escalation to SYSTEM. Affected: APM Server Windows installer...

CVE-2025-0712 APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files,...

APM Server (Windows Installer) 8.16.3, 8.17.1 Security Update (ESA-2025-01)

APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation LPE when using the Windows Installer ESA-2025-01 An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from improp...

CVE-2024-11994

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs...

CVE-2024-11994

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs...

CVE-2024-11994 APM Server Insertion of Sensitive Information into Log File

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs...

CVE-2024-11994 APM Server Insertion of Sensitive Information into Log File

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs...

CVE-2024-11994

CVE-2024-11994 affects Elastic APM Server. A partially failed bulk index request can cause parts of the document body to be logged in APM Server error logs, potentially exposing sensitive information. Affected versions are Elastic APM Server prior to the fix; mitigation is to upgrade to version 8...