📦

logstash

Vendor: elastic

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 103 Total Indexed
Avg. EPSS 1.66% Exploit Prob.
Latest CVE CVE-2026-33466 Apr 08

Security Vulnerability Index

Page 2 / 11
7.5 CVSS
CVE-2016-1000221

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

EPSS: 1.78%
6.4 CVSS
CVE-2015-4152

Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.

EPSS: 3.01%
7.5 CVSS
CVE-2014-4326
RCE

Elasticsearch Logstash 1.0.14 through 1.4.x before 1.4.2 allows remote attackers to execute arbitrary commands via a crafted event in (1) zabbix.rb or (2) nagios_nsca.rb in outputs/.

EPSS: 3.30%