Elastic Cloud On Kubernetes

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-31416 Oct 26, 19:15 MEDIUM This Month

Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Elastic Elastic Cloud On Kubernetes

NVD

CVSS 3.1

5.3

EPSS

0.4%

CVE-2020-7010 Jun 03, 18:15 Go HIGH PATCH This Week

Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Kubernetes Elastic Elastic Cloud On Kubernetes

NVD

CVSS 3.1

7.5

EPSS

1.4%

CVE-2023-31416

EPSS 0% CVSS 5.3

MEDIUM This Month

Information Disclosure Elastic Elastic Cloud On Kubernetes

NVD

CVE-2020-7010 Go

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Kubernetes Elastic +1

NVD