Advisories · Technology

Elastic Beats.

Every CVE that names Elastic Beats among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-25011 CVE record

CVSS 7.0 High

Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer
- Elastic Beats
- CWE-427
Not analysed yet 30 Jul 2025
CVE-2023-31421 CVE record

CVSS 5.9 Medium

Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue
- Elastic Beats
- Elastic Agent
- Weak cryptography or TLS
Not analysed yet 26 Oct 2023