# Upgrading NGINX for Elasticsearch server vulnerability
**URL:** https://discuss.elastic.co/t/upgrading-nginx-for-elasticsearch-server-vulnerability/296046
**Category:** Elasticsearch
**Created:** [February 2, 2022, 9:47am UTC](https://discuss.elastic.co/t/upgrading-nginx-for-elasticsearch-server-vulnerability/296046 "2022-02-02T09:47:10Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Jane\_Garcia](https://discuss.elastic.co/u/Jane_Garcia)
#### Post date: [February 2, 2022, 9:47am UTC](https://discuss.elastic.co/t/upgrading-nginx-for-elasticsearch-server-vulnerability/296046/1 "2022-02-02T09:47:10Z")
We have _nginx 0.6.x \< 1.20.1 1-Byte Memory Overwrite RCE_ vulnerability for Elasticsearch server (v. 2.4.6) as mentioned in [nginx 0.6.x \< 1.20.1 1-Byte Memory Overwrite RCE | Tenable®](https://www.tenable.com/plugins/nessus/150154) we need to upgrade to 1.20.1 or later.
how would the process for this be? is it possible to only upgrade nginx or is their a need for elasticserach to be upgraded on compatible version as well?
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 2, 2022, 9:57am UTC](https://discuss.elastic.co/t/upgrading-nginx-for-elasticsearch-server-vulnerability/296046/2 "2022-02-02T09:57:47Z")
Welcome to our community! 😃
You can see mitigation options here - [Apache Log4j2 Remote Code Execution (RCE) Vulnerability - CVE-2021-44228 - ESA-2021-31](https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 2, 2022, 9:58am UTC](https://discuss.elastic.co/t/upgrading-nginx-for-elasticsearch-server-vulnerability/296046/3 "2022-03-02T09:58:40Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.