Elastic Winlogbeat vulnerabilities
2 known vulnerabilities affecting elastic/winlogbeat.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2
Vulnerabilities
Page 1 of 1
CVE-2019-7613P3HIGHCVSS 7.5fixed in 5.6.16≥ 6.0.0, < 6.6.22019-03-25
CVE-2019-7613 [HIGH] CWE-778 CVE-2019-7613: Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to in
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.
nvd
CVE-2024-14047P4HIGHCVSS 7.1≥ 7.6.0, < 8.13.02026-09-01
CVE-2024-14047 [HIGH] CWE-59 CVE-2024-14047: A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a dir
A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation to write to or delete arbitrary files. Successful exploi
nvd