# APM Server 8.16.1 Security Update (ESA-2024-41)

**URL:** <https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710>\
**Category:** Security Announcements\
**Created:** [May 1, 2025, 10:14am UTC](https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710 "2025-05-01T10:14:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ismisepaul](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ismisepaul/32/102235_2.png) [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Post date:** [May 1, 2025, 10:14am UTC](https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710/1 "2025-05-01T10:14:04Z")

</div>

APM Server Insertion of Sensitive Information into Log File (ESA-2024-41)

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs.

**Affected Versions:**  
APM Server versions \> 8.0.0 and \< 8.16.1

**Solutions and Mitigations:**  
The issue is resolved in version 8.16.1

**Severity:** CVSSv3: 5.7(Medium) - AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N  
**CVE ID:** CVE-2024-11994