Elastic Agent And Elastic Defend vulnerabilities
2 known vulnerabilities affecting elastic/elastic_agent_and_elastic_defend.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2023-46669P4HIGHCVSS 7.1≥ 8.0.0, < 8.15.02025-05-01
CVE-2023-46669 [HIGH] CWE-200 CVE-2023-46669: Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security
Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack. This issue was identified by Elastic engineers and Elastic has no indication that it is known or has been exploited by malicious actors.
nvd
CVE-2026-102413P4MEDIUMCVSS 6.2≥ 8.19.13, ≤ 8.19.21≥ 9.2.7, ≤ 9.2.8+3 more2026-10-06
CVE-2026-102413 [MEDIUM] CWE-248 CVE-2026-102413: Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially craft
Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations (including Chinese, Japanese, and Korean locales) on Windows, an unhandled exception can occur during file-path handling.
nvd