Advisories · Technology

Elastic APM Server.

Every CVE that names Elastic APM Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115716 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service
- Elastic APM Server
- Denial of service
Not analysed yet 3 Nov 2026
CVE-2026-115289 CVE record

CVSS 4.3 Medium

Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure
- Elastic APM Server
- CWE-694
Not analysed yet 3 Nov 2026
CVE-2026-78594 CVE record

CVSS 4.9 Medium

Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service
- Elastic Apm Server
- CWE-409
Not analysed yet 2 Sept 2026
CVE-2025-0712 CVE record

CVSS 7.0 High

APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer
- Elastic APM Server
- CWE-427
Not analysed yet 30 Jul 2025
CVE-2024-11994 CVE record

CVSS 5.7 Medium

APM Server Insertion of Sensitive Information into Log File
- Elastic APM Server
- Information disclosure
Not analysed yet 1 May 2025
CVE-2023-31421 CVE record

CVSS 5.9 Medium

Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue
- Elastic Beats
- Elastic Agent
- Weak cryptography or TLS
Not analysed yet 26 Oct 2023