CVE-2015-1427: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2015-1427Elastic
- Related
- CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022CVE-2019-7609: Kibana Arbitrary Code Execution Known Exploited Vulnerabilities · Jan 10, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026