CVE-2014-3120 1

CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

Vulnerabilities & Patching