CVE-2018-17247

score

<0.1

cvss

5.9

epss

1.4%

published

2018-12-20

kev added

—

first seen

2026-10-21

Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XML External Entity (XXE) flaw in Machine Learning's find_file_structure API, letting attackers send crafted requests to leak local file contents, exploit requires external network access policy in Java Security Manager.