Browse / Elastic

Elastic

See its reports on the map

Attack surface: 19,850 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Elastic

• Access Control4
• Cross-site Scripting2
• Code Execution2
• Information Disclosure1
• Server-Side Request Forgery1
• Cross-Site Request Forgery1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Prototype Pollution leads to XSS on https://blog.swiftype.com/#__proto__[asd]=alert(document.domain)Cross-site Scripting (XSS) - DOM · high
   157 votes
2. CVE-2021-40870 on [52.204.160.31]Code Injection · critical
   75 votes
3. Critical || Unrestricted access to private Github repos and properties of Elastic through leaked token of Elastic employeeCleartext Storage of Sensitive Information · critical
   64 votes
4. blind Server-Side Request Forgery (SSRF) allows scanning internal portsServer-Side Request Forgery (SSRF) · medium
   54 votes
5. Synthetics Recorder: Code injection when recording website with malicious contentCode Injection · high
   47 votes
6. CSRF in AppSearch allows creation of "curations"Cross-Site Request Forgery (CSRF) · medium
   35 votes
7. RCE hazard in reporting (via Chromium)Privilege Escalation · critical
   $10,00025 votes
8. Improper authorization on `/api/as/v1/credentials/` for Dev Role User with Limited Engine AccessImproper Access Control - Generic · high
   21 votes
9. Remote Code Execution in coming Kibana 7.7.0Privilege Escalation · critical
   $5,00014 votes
10. Default password on 34.120.209.175Weak Cryptography for Passwords · medium
    13 votes
11. Improper authorization on `/api/as/v1/credentials/` allows any App Search user to access all API keys and escalate privilegesImproper Access Control - Generic · high
    13 votes
12. Fix for CVE-2021-22151 (Kibana path traversal issue) can be bypassed on WindowsPath Traversal · low
    10 votes
13. XXE in Enterprise Search's App Search web crawlerXML External Entities (XXE) · critical
    9 votes
14. [Swiftype] - Stored XSS via document field `url` triggers on `https://app.swiftype.com/engines/<engine>/document_types/<type>/documents/<id>`Cross-site Scripting (XSS) - Stored · high
    7 votes