Known vulnerabilities in Elasticsearch 7.0.0-beta1

Software: Elasticsearch
Version: 7.0.0-beta1
Software CPE: cpe:2.3:a:elastic_stack:elasticsearch:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Elasticsearch version 7.0.0-beta1 Elasticsearch 7.0.0-beta1 is affected by 17 vulnerabilities: 11 medium, 6 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136669 - Resource exhaustion
CVE-2026-49090
CWE-400 Medium
No
No
7.17.24, 8.15.0 02.07.2026 SB2026070207
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566
CWE-200 Medium
No
No
8.19.10, 9.1.10, 9.2.4 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU120208 - Resource exhaustion
CVE-2025-68384
CWE-400 Medium
No
No
8.19.9, 9.1.9, 9.2.3 19.12.2025 SB2025121916
#VU120207 - Resource exhaustion
CVE-2025-68390
CWE-400 Low
No
No
8.19.8, 9.1.8, 9.2.2 19.12.2025 SB2025121524
SB2026041730
SB2026062332
#VU119962 - Improper Authentication
CVE-2025-37731
CWE-287 Medium
No
No
8.19.8, 9.1.8, 9.2.2 15.12.2025 SB2025121524
SB2026041730
#VU116631 - Information Exposure Through Log Files
CVE-2025-37727
CWE-532 Medium
No
No
8.18.8, 8.19.5, 9.0.8, 9.1.5 06.10.2025 SB2025100653
SB2026031331
SB2026041730
#VU108114 - Resource exhaustion
CVE-2024-52979
CWE-400 Medium
No
No
7.17.25, 8.16.0 01.05.2025 SB2025050126
SB2025121138
SB2026041711
#VU103109 - Resource exhaustion
CVE-2024-43709
CWE-400 Medium
No
No
7.17.21, 8.13.3 21.01.2025 SB2025012117
SB2025041654
SB2025063009
#VU95145 - Cleartext Storage of Sensitive Information
CVE-2024-23444
CWE-312 Low
No
No
7.17.23, 8.13.0 01.08.2024 SB2024080141
SB2024112711
SB2024112732
and 6 more
#VU87905 - Resource Management Errors
CVE-2024-23450
CWE-399 Medium
No
No
7.17.19, 8.13.0 28.03.2024 SB2024032832
SB2024071514
SB2024071817
and 6 more
#VU83419 - Improper input validation
CVE-2023-46673
CWE-20 Medium
No
No
7.17.14, 8.10.3 22.11.2023 SB2023112219
SB2024020228
SB2024021438
and 3 more
#VU81073 - Resource exhaustion
CVE-2023-31418
CWE-400 Medium
No
No
7.17.13, 8.9.0 22.09.2023 SB2023092233
SB2024020704
SB2024071610
and 2 more
#VU80874 - Stack-based buffer overflow
CVE-2023-31419
CWE-121 Medium
Public exploit available
No
7.17.13, 8.9.1 19.09.2023 SB2023091904
SB2023112014
SB2024020625
and 3 more
#VU80623 - Information Exposure Through Log Files
CVE-2023-31417
CWE-532 Low
No
No
7.17.13, 8.9.2 11.09.2023 SB2023091162
SB2023122810
SB2024020625
and 2 more
#VU51712 - Improper preservation of permissions
CVE-2021-22137
CWE-281 Low
No
No
6.8.15, 7.11.2 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 2 more
#VU51710 - Permissions, Privileges, and Access Controls
CVE-2021-22135
CWE-264 Low
No
No
6.8.15, 7.11.2 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 1 more
#VU50604 - Information Exposure Through Log Files
CVE-2020-7021
CWE-532 Low
No
No
6.8.14, 7.10.0 11.02.2021 SB2021021101
SB2025050123