What’s Vulnerable › Products

Elastic Beats vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Elastic Beats version is affected

Latest Elastic Beats vulnerabilities

• CVE-2025-25011 — Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer (CVSS 7.0)
• CVE-2023-49922 — Beats Insertion of Sensitive Information into Log File (CVSS 6.5)
• CVE-2023-31421 — Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue (CVSS 7.5)