PULSE
EN
FEED
ransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technologyransomspacebears reclama a Alma Center Servizi Medicali S.r.l. · IT · Healthcareransomspacebears reclama a Holistic Health Group, Inc. (d/b/a Suncrafted) · US · Healthcareransomn0n reclama a Company #69 · Not Foundransomiah6477 reclama a alera · Professional Servicesransomn0n reclama a Company #68 · US · Not Foundransomn0n reclama a Company #67 · NL · Not Foundransomn0n reclama a Company #66 · Not Foundransomn0n reclama a Interior Technologies · Technologyransomeclipse reclama a Taiwan Otsuka Pharmaceutical · TW · Healthcareransomeclipse reclama a japantimes.co.jp · JP · Otherransomakira reclama a FOODMatch · Agriculture and Food Productionransomakira reclama a Shediac Lobster Shop · CA · Retail & E-Commerceransomakira reclama a Torns Enterprises · Not Foundransomkairos reclama a Oceania Digital Communications · VU · Technology
← Todos los CVEs
CVE Watch—

CVE-2014-3120

Elasticsearch Remote Code Execution Vulnerability

CVSS

—

Sin CVSS

EPSS

88.6%

p100

KEV

SÍ

25 mar 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
88.6%EPSS · 30 días88.6%
2026-09-162026-10-14
Ficha del catálogo KEV

Producto

Elastic / Elasticsearch

Vulnerabilidad

Elasticsearch Remote Code Execution Vulnerability

Añadido a KEV

25 mar 2022

Remediar antes de

15 abr 2022

Uso conocido en ransomware

No

Descripción resumida

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

Acción requerida

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2014-3120

CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2015-1427—
100.0%
KEV—80Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability—