PULSE
ESEN
FEED
ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Education
← Todos os CVEs
CVE Watch—

CVE-2014-3120

Elasticsearch Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

88.6%

p100

KEV

SIM

25 de mar. de 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
88.6%EPSS · 30 dias88.6%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Elastic / Elasticsearch

Vulnerabilidade

Elasticsearch Remote Code Execution Vulnerability

Adicionado ao KEV

25 de mar. de 2022

Corrigir até

15 de abr. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2014-3120

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2015-1427—
100.0%
KEV—80Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability—