Known Exploited Vulnerabilities March 25, 2022 · CISA KEV Catalog

CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2014-3120Elastic

Related

CVE-2015-1427: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022

CVE-2019-7609: Kibana Arbitrary Code Execution Known Exploited Vulnerabilities · Jan 10, 2022

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026