9.8Kritisch KEV

CVE-2015-1427Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

elastic elasticsearch; redhat fuse Veröffentlicht: 2015-02-17 17:00 (vor 11 Jahren)

Bekannt ausgenutzt — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

CISA hat am 25.03.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 15.04.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2015-1427

Beschreibung

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
elastic	elasticsearch	< 1.3.8
redhat	fuse	1.0.0

Referenzen und Patches

20150211 Elasticsearch vulnerability CVE-2015-1427 mailing-listBroken LinkThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
RHSA-2017:0868 vendor-advisoryThird Party Advisory
72585 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/ PatchVendor Advisory
elasticsearch-cve20151427-command-exec(100850) vdb-entryThird Party AdvisoryVDB Entry
http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.html Third Party AdvisoryVDB Entry
https://www.elastic.co/community/security/ Not ApplicableVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427 US Government Resource

CPE-Treffer (NVD) (3)

cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:* < 1.3.8
cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:* ≥ 1.4.0 < 1.4.3
cpe:2.3:a:redhat:fuse:1.0.0:*:*:*:*:*:*:*

CVSS-Score

9.8Kritisch

Quelle: CISA-ADP · CVSS 3.1

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Alle Scores (4)

CISA-ADP	CVSS 3.1	9.8Kritisch
nvd	CVSS 3.1	9.8Kritisch
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	9.8Kritisch
nvd	CVSS 2.0	7.5Hoch

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

99.91%

höher als 100 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: active
Automatisierbar: yes
Technische Auswirkung: total

Zeitverlauf

ID reserviert2015-01-31
Veröffentlicht2015-02-17 17:00
Bei IP-DB eingegangen2026-10-24 23:33
In KEV aufgenommen2022-03-25
Zuletzt aktualisiert2026-06-17 03:22

Vergeben von (CNA): mitre
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Elasticsearch

7.1Hoch

CVE-2026-103009 vor 27 Tagen

Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure

Elastic Elasticsearch

Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized shard identifier. Elasticsearch contains an authorization bypas…

6.5Mittel

CVE-2026-103008 vor 27 Tagen

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Elastic Elasticsearch

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data structure with no bound on recursion depth. Elasticsearch contains an uncontro…

7.2Hoch

CVE-2026-103007 vor 27 Tagen

Incorrect Authorization in Elasticsearch Leading to Privilege Escalation

Elastic Elasticsearch

Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configu…

6.5Mittel

CVE-2026-103006 vor 27 Tagen

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Elastic Elasticsearch

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggr…

6.5Mittel

CVE-2026-103005 vor 27 Tagen

Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service

Elastic Elasticsearch

Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of…

6.5Mittel

CVE-2026-102411 vor 27 Tagen

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Elastic Elasticsearch

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, …