Elastic Beats
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-25011 | 8.0.0 – < 9.1.0 | Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer | HIGH 7.0 | 0.2 % | ||
| CVE-2023-49922 | 7.0.0, 8.0.0 – < 7.17.16, 8.11.3 | Beats Insertion of Sensitive Information into Log File | MEDIUM 6.8 | 0.7 % | ||
| CVE-2023-31421 | 8.0.0, 8.9.2 | Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue | HIGH 7.5 | 0.3 % |