Elastic Beats vulnerabilities

2 CVEs affecting Elastic Beats, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49922, published 2023-12-12.

More from Elastic.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-49922, published 2023-12-12. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP…
• CVE-2023-31421, published 2023-10-26. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however,…