Known vulnerabilities in Elastic Cloud Enterprise 4.2.0
Vendor:
Elastic Stack
Software:
Elastic Cloud Enterprise
Version:
4.2.0
Software CPE:
cpe:2.3:a:elastic_stack:elastic_cloud_enterprise:*:*:*:*:*:*:*:*
Website:
https://www.elastic.co/
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
4.2.0
4.1.0
4.2.1
3.8.6
3.8.5
3.8.4
4.0.3
3.8.3
4.0.2
4.0.1
4.0.0
3.8.2
3.8.1
3.8.0
3.7.3
3.7.2
3.7.1
3.7.0
3.6.2
2.13.4
3.6.1
3.6.0
3.5.1
3.5.0
3.4.1
3.4.0
3.3.0
3.2.1
3.2.0
3.1.1
3.1.0
3.0.0
2.13.3
2.13.2
2.13.1
2.13.0
2.12.4
2.12.3
2.12.2
2.12.1
2.12.0
2.11.2
2.11.1
2.11.0
2.10.1
2.10.0
2.9.2
2.9.1
2.9.0
2.8.1
2.8.0
2.7.2
2.7.1
2.7.0
2.6.2
2.6.1
2.6.0
2.5.1
2.5.0
2.4.3
2.4.2
2.4.1
2.4.0
2.3.2
2.3.1
2.3.0
2.2.3
2.2.2
2.2.1
2.2.0
2.1.1
2.1.0
2.0.1
2.0.0
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.2
1.0.1
1.0.0
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU158529 - Authorization Bypass Through User-Controlled Key CVE-2026-115706 |
CWE-639 | Low | 3.8.6, 4.2.1 | 30.10.2026 |
SB2026103037 |
||
| #VU158528 - File And Directory Information Exposure CVE-2026-115707 |
CWE-538 | Low | 3.8.6, 4.2.1 | 30.10.2026 |
SB2026103037 |
||
| #VU158527 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-115708 |
CWE-59 | Low | 3.8.6, 4.2.1 | 30.10.2026 |
SB2026103037 |
||
| #VU158526 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-115709 |
CWE-59 | Low | 3.8.6, 4.2.1 | 30.10.2026 |
SB2026103037 |
||
| #VU158525 - File And Directory Information Exposure CVE-2026-115711 |
CWE-538 | Low | 3.8.6, 4.2.1 | 30.10.2026 |
SB2026103037 |
||
| #VU158524 - Incorrect Authorization CVE-2026-115712 |
CWE-863 | Low | 3.8.6, 4.2.1 | 30.10.2026 |
SB2026103037 |
||
| #VU158523 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-115713 |
CWE-59 | Low | 4.2.1 | 30.10.2026 |
SB2026103037 |