CVE-2014-6439
Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published Updated
PatchFirst · Latest vulnerabilities
elasticsearch vulnerabilities · Page 3
Vulnerabilities published for elasticsearch in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 41
Check your server
Check your installed stack and versions against the current vulnerability feeds.