Elastic Elasticsearch 6.5.1
Approved changes feed: RSS · Atom
cpe:2.3:a:elastic:elasticsearch:6.5.1:*:*:*:*:*:*:*
part: a version: 6.5.1 update: *
| Vendor | Elastic (1d0b8d2a-fd47-5b20-b005-34326f9bd037) |
|---|---|
| Product | Elasticsearch (a0208702-3648-5bff-bba8-04bce4d71093) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/elastic/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.860058 |
pkg:elastic/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.860060 |
pkg:github/elastic/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.860061 |
pkg:rpm/opensuse/elasticsearch |
purl2cpe | 2026-06-01 10:15:14.860062 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-17247 |
vulnerable | 2026-06-03 14:38:21.644612 |
Details available
Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API. If a policy allowing external network access has been added to Elasticsearch's Java Security Manager then an attacker could send a specially crafted request capable of leaking content of local files on the Elasticsearch node. This could allow a user to access information that they should not have access to.
Published: 2018-12-20T22:00:00.000Z
Updated: 2024-08-05T10:47:04.127Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.