AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2014-3120.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.
EXPLOITATION STATUSCISA known exploitedAdded Mar 25, 2022
RECORD STATUSAwaiting NVD dataModified Mar 25, 2022

Disclosure summary

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

CISA remediation guidance

Apply updates per vendor instructions.

Original records & references

PUBLISHED 2022-03-25T00:00:00-04:00
MODIFIED 2022-03-25T00:00:00-04:00
INGESTED 2026-10-06T11:42:58-04:00