Search/CVE-2015-3337
● CVE

CVE-2015-3337

VendorelasticsearchProductelasticsearchDiscoveredMay 1, 2015UpdatedMay 6, 2026

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

View graph Watch Export
CVSS v3.1
—
EPSS
33.2%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 2, 2026
▲ 0.23pp
32.9% → 33.2% over 2 tracked changes
Connections
2 relationships
Timeline
disclosure → media coverage
May 1, 2015
Disclosure — published as a CVE record. · last revised by NVD May 6, 2026
Public PoC (1)
github.com/jas502n/CVE-2015-3337
Unverified third-party code — review before executing.