Elastic APM Server vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20252
4. 20263

Newest CVEs

• CVE-2026-115716

  Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service

  Elastic · APM Server

  Medium6.5
• CVE-2026-115289

  Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure

  Elastic · APM Server

  Medium4.3
• CVE-2026-78594

  Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

  Elastic · Apm Server

  Medium4.9
• CVE-2025-0712

  APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

  Elastic · APM Server

  High7.0
• CVE-2024-11994

  APM Server Insertion of Sensitive Information into Log File

  Elastic · APM Server

  Medium5.7
• CVE-2024-37286

  APM Server Insertion of Sensitive Information into Log File

  Elastic · APM Server

  Medium5.7
• CVE-2024-23448

  APM Server Insertion of Sensitive Information into Log File

  Elastic · APM Server

  Medium5.7
• CVE-2023-31421

  Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue

  Elastic · Beats

  Medium5.9