Apm Server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AS

Product

Apm Server

by Elastic · last CVE Sep 2, 2026

6

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 3Medium 3Low 0

Severity

All severities6 Critical0 High3 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Apm Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-23448	7.5	1%	Feb 7	APM Server Insertion of Sensitive Information into Log File Affected: 8.12 before 8.12.1
CVE-2023-31421	7.5	0%	Oct 26	Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue Affected: 8.0.0, 8.9.2
CVE-2025-0712	7.0	0%	Jul 30	APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer Affected: 8.16 through 8.16.2; 8.17 through 8.17.0
CVE-2024-37286	6.5	0%	Aug 3	APM Server Insertion of Sensitive Information into Log File Affected: before 8.14.0
CVE-2024-11994	5.7	0%	May 1	APM Server Insertion of Sensitive Information into Log File Affected: 8.0.0 before 8.16.1
CVE-2026-78594	4.9	0%	Sep 2	Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Affected: 8.0.0 through 8.19.19; 9.0.0 through 9.4.4; 9.5.0