Known vulnerabilities in APM Server
Vendor:
Elastic Stack
Software:
APM Server
Software CPE:
cpe:2.3:a:elastic_stack:apm_server:*:*:*:*:*:*:*:*
Website:
https://www.elastic.co/
Total vulnerabilities:
5
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
9.5.1
9.4.5
8.19.20
9.5.0
9.4.4
9.3.8
8.19.19
9.4.3
8.19.18
9.3.7
9.3.6
8.19.17
9.4.2
9.3.5
8.19.16
9.4.1
9.4.0
9.3.4
8.19.15
8.19.14
9.3.3
9.2.8
9.3.2
9.2.7
8.19.13
9.3.1
9.2.6
8.19.12
9.3.0
9.2.5
8.19.11
9.2.4
9.1.10
8.19.10
9.2.3
9.1.9
8.19.9
9.2.2
9.1.8
8.19.8
9.2.1
9.1.7
8.19.7
9.2.0
9.1.6
8.19.6
9.1.5
8.19.5
9.0.8
8.18.8
9.1.4
8.19.4
9.0.7
8.18.7
8.19.3
8.18.6
9.0.6
9.1.3
9.1.2
8.19.2
8.17.10
9.0.5
8.18.5
8.19.1
9.1.1
9.1.0
8.19.0
9.0.4
8.18.4
8.17.9
9.0.3
8.18.3
8.17.8
7.17.29
9.0.2
8.17.7
8.18.2
9.0.1
8.18.1
8.17.6
8.18.0
8.17.5
9.0.0
8.17.4
8.16.6
8.17.3
8.16.5
7.17.28
8.16.4
8.17.2
8.17.1
8.16.3
7.17.27
8.16.2
8.17.0
7.17.26
8.15.5
8.16.1
8.16.0
8.15.4
7.17.25
8.15.3
8.15.2
7.17.24
8.15.1
8.15.0
7.17.23
8.14.3
8.14.2
7.17.22
8.14.1
8.14.0
8.13.4
8.13.3
7.17.21
7.17.20
8.13.2
8.13.1
8.13.0
7.17.19
8.12.2
8.12.1
8.12.0
8.11.4
8.11.3
8.11.2
8.11.1
8.11.0
8.10.4
8.10.3
8.10.2
8.10.1
8.10.0
8.9.2
8.9.1
8.9.0
8.8.2
8.8.1
8.8.0
8.7.1
8.7.0
8.6.2
8.6.1
8.6.0
8.5.3
8.5.2
8.5.1
8.5.0
8.4.3
8.4.2
8.4.1
8.4.0
8.3.3
8.3.2
8.3.1
8.3.0
8.2.3
8.2.2
8.2.1
8.2.0
8.1.3
8.1.2
8.1.1
8.1.0
8.0.1
8.0.0
7.17.18
7.17.17
7.17.16
7.17.15
7.17.14
7.17.13
7.17.12
7.17.11
7.17.10
7.17.9
7.17.8
7.17.7
7.17.6
7.17.5
7.17.4
7.17.3
7.17.2
7.17.1
7.17.0
7.16.3
7.16.2
7.16.1
7.16.0
7.15.2
7.15.1
7.15.0
7.14.2
7.14.1
7.14.0
7.13.4
7.13.3
7.13.2
7.13.1
7.13.0
7.12.1
7.12.0
7.11.2
7.11.1
7.11.0
7.10.2
7.10.1
7.10.0
7.9.3
7.9.2
7.9.1
7.9.0
7.8.1
7.8.0
7.7.1
7.7.0
7.6.2
7.6.1
7.6.0
7.5.2
7.5.1
7.5.0
7.4.2
7.4.1
7.4.0
7.3.2
7.3.1
7.3.0
7.2.1
7.2.0
7.1.1
7.1.0
7.0.1
7.0.0
6.8.23
6.8.22
6.8.21
6.8.20
6.8.19
6.8.18
6.8.17
6.8.16
6.8.15
6.8.14
6.8.13
6.8.12
6.8.11
6.8.10
6.8.9
6.8.8
6.8.7
6.8.6
6.8.5
6.8.4
6.8.3
6.8.2
6.8.1
6.8.0
6.7.2
6.7.1
6.7.0
6.6.2
6.6.1
6.6.0
6.5.4
6.5.3
6.5.2
6.5.1
6.5.0
6.4.3
6.4.2
6.4.1
6.4.0
6.3.2
6.3.1
6.3.0
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.1
6.0.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114143 - Untrusted Search Path CVE-2025-0712 |
CWE-426 | Low | 8.16.3, 8.17.1 | 18.08.2025 |
SB2025081823 |
||
| #VU108117 - Information Exposure Through Log Files CVE-2024-11994 |
CWE-532 | Low | 8.16.1 | 01.05.2025 |
SB2025050129 |
||
| #VU95399 - Information Exposure Through Log Files CVE-2024-37286 |
CWE-532 | Low | 8.14.0 | 06.08.2024 |
SB2024080623 |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 7.17.21, 8.14.0 | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU86375 - Information Exposure Through Log Files CVE-2024-23448 |
CWE-532 | Low | 8.12.1 | 13.02.2024 |
SB2024021322 |