Skip to content

Product

Elastic Endpoint vulnerabilities

1 published CVE affecting Elastic Endpoint, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Elastic Endpoint CVEs

Newest publication first

  1. CVE-2023-46668 Elastic Endpoint Insertion of Sensitive Information into Log File

    Published
    CriticalCVSS 9.1 EPSS 0.40%

    If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitly set to debug, and when Elastic Agent is simultaneously configured to collect and send those logs to Elasticsearch, then Elastic Agent API keys can be viewed i...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.