Advisories · Technology

Elastic Logstash.

Every CVE that names Elastic Logstash among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-33466 CVE record

CVSS 8.1 High

Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write
- Elastic Logstash
- Path traversal
Not analysed yet 8 Apr 2026
CVE-2025-37730 CVE record

CVSS 6.5 Medium

Logstash Improper Certificate Validation in TCP output
- Elastic Logstash
- Weak cryptography or TLS
Not analysed yet 6 May 2025
CVE-2023-46672 CVE record

CVSS 8.4 High

Logstash Insertion of Sensitive Information into Log File
- Elastic Logstash
- Information disclosure
Not analysed yet 15 Nov 2023
CVE-2019-7620 CVE record

Uncontrolled resource consumption in Elastic Logstash
- Elastic Logstash
- Denial of service
Not analysed yet 30 Oct 2019
CVE-2019-7613 CVE record

Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw.
- Elastic Logstash
- CWE-778
Not analysed yet 25 Mar 2019
CVE-2019-7612 CVE record

Sensitive information in error messages in Elastic Logstash
- Elastic Logstash
- Information disclosure
Not analysed yet 25 Mar 2019
CVE-2018-3817 CVE record

Sensitive information in log files in Elastic Logstash
- Elastic Logstash
- Information disclosure
Not analysed yet 30 Mar 2018
CVE-2016-10363 CVE record

Elastic Logstash: Logstash versions prior to 2.3.3, when using the Netflow Codec plugin…
- Elastic Logstash
- CWE-248
Not analysed yet 16 Jun 2017