CVE

CVE-2015-3337

4.3

CVSS

Description

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Attack Vector

Privileges Req.

User Interaction

Updated Oct 12, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~15 seconds

CVE-2015-3337 Scanner

CVE-2015-3337 scanner - Directory Traversal vulnerability in Elasticsearch

Used 3.2k times · 3.4k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →