Known vulnerabilities in Elasticsearch 8.19.21
Vendor:
Elastic Stack
Software:
Elasticsearch
Version:
8.19.21
Software CPE:
cpe:2.3:a:elastic_stack:elasticsearch:*:*:*:*:*:*:*:*
Website:
https://www.elastic.co/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
8.19.23
9.4.8
9.5.5
8.19.22
9.4.7
9.5.4
9.5.3
9.4.6
8.19.21
9.5.2
9.5.1
9.4.5
8.19.20
9.5.0
9.2.9
9.4.4
9.3.8
8.19.19
8.19.18
9.3.7
9.4.3
8.19.17
9.3.6
9.4.2
9.3.5
8.19.16
9.4.1
9.4.0
8.19.15
9.3.4
9.2.8
8.19.14
9.3.3
9.3.2
9.2.7
8.19.13
9.3.1
9.2.6
8.19.12
9.3.0
9.2.5
8.19.11
9.1.10
8.19.10
9.2.4
9.2.3
9.1.9
8.19.9
9.2.2
9.1.8
8.19.8
9.1.7
8.19.7
9.2.1
9.1.6
9.2.0
8.19.6
9.1.5
9.0.8
8.19.5
8.18.8
9.1.4
8.19.4
9.0.7
8.18.7
8.19.3
8.18.6
9.1.3
9.0.6
9.1.2
8.19.2
9.0.5
8.18.5
8.17.10
8.19.1
9.1.1
9.1.0
8.19.0
9.0.4
8.18.4
8.17.9
9.0.3
8.18.3
7.17.29
8.17.8
9.0.2
8.17.7
8.18.2
9.0.1
8.18.1
8.17.6
8.17.5
8.18.0
9.0.0
8.17.4
8.16.6
8.16.5
8.17.3
7.17.28
8.16.4
8.17.2
8.17.1
8.16.3
7.17.27
8.16.2
8.17.0
7.17.26
8.15.5
8.16.1
8.16.0
8.15.4
7.17.25
8.15.3
8.15.2
7.17.24
8.15.1
8.15.0
7.17.23
8.14.3
8.14.2
7.17.22
8.14.1
8.14.0
8.13.4
8.13.3
7.17.21
7.17.20
8.13.2
8.13.1
8.13.0
7.17.19
8.12.2
8.12.1
7.17.18
7.17.17
8.12.0
8.11.4
8.11.3
7.17.16
8.11.2
7.17.15
8.11.1
8.11.0
8.10.4
8.10.3
7.17.14
8.10.2
8.10.1
8.10.0
8.9.2
7.17.13
8.9.1
8.9.0
7.17.12
8.8.2
7.17.11
8.8.1
8.8.0
7.17.10
8.7.1
8.7.0
8.6.2
7.17.9
8.6.1
8.6.0
8.5.3
7.17.8
8.5.2
8.5.1
8.5.0
7.17.7
8.4.3
8.4.2
8.4.1
8.4.0
7.17.6
8.3.3
8.3.2
8.3.1
8.3.0
7.17.5
8.2.3
8.2.2
8.2.1
7.17.4
8.2.0
8.1.3
7.17.3
8.1.2
7.17.2
8.1.1
8.1.0
8.0.1
7.17.1
8.0.0
7.17.0
7.16.3
6.8.23
7.16.2
6.8.22
7.16.1
6.8.21
7.16.0
7.15.2
7.15.1
6.8.20
7.15.0
7.14.2
6.8.19
7.14.1
6.8.18
7.14.0
7.13.4
6.8.17
7.13.3
7.13.2
7.13.1
6.8.16
7.13.0
7.12.1
7.12.0
6.8.15
7.11.2
7.11.1
6.8.14
7.11.0
7.10.2
7.10.1
7.10.0
6.8.13
7.9.3
7.9.2
7.9.1
6.8.12
7.9.0
6.8.11
7.8.1
7.8.0
6.8.10
7.7.1
6.8.9
7.7.0
7.6.2
6.8.8
6.8.7
7.6.1
7.6.0
7.5.2
7.5.1
6.8.6
7.5.0
6.8.5
7.4.2
7.4.1
6.8.4
7.4.0
7.3.2
6.8.3
7.3.1
6.8.2
7.2.1
7.3.0
7.2.0
6.7.2
6.8.0
6.8.1
7.0.1
7.1.0
7.1.1
0.4.0
0.5.0
0.5.1
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
0.10.0
0.11.0
0.12.0
0.12.1
0.13.0
0.13.1
0.14.0
0.14.1
0.14.2
0.14.3
0.14.4
0.15.0
0.15.1
0.15.2
0.16.0
0.16.1
0.16.2
0.16.3
0.16.4
0.16.5
0.17.0
0.17.1
0.17.2
0.17.3
0.17.4
0.17.5
0.17.6
0.17.7
0.17.8
0.17.9
0.17.10
0.18.0
0.18.1
0.18.2
0.18.3
0.18.4
0.18.5
0.18.6
0.18.7
0.19.0
0.19.1
0.19.2
0.19.3
0.19.4
0.19.5
0.19.6
0.19.7
0.19.8
0.19.9
0.19.10
0.19.11
0.19.12
0.20.0
0.20.1
0.20.2
0.20.3
0.20.4
0.20.5
0.20.6
0.90.0
0.90.1
0.90.2
0.90.3
0.90.4
0.90.5
0.90.6
0.90.7
0.90.8
0.90.9
0.90.10
0.90.11
0.90.12
0.90.13
1.0.0
1.0.1
1.0.2
1.0.3
1.1.0
1.1.1
1.1.2
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.6.0
1.6.1
1.6.2
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
2.0.0
2.0.1
2.0.2
2.1.0
7.0.0-beta1
6.7.1
7.0.0-rc2
7.0.0-rc1
6.5.3
6.4.3
6.4.2
6.4.1
6.4.0
6.3.2
6.3.1
6.3.0
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.1
6.0.0
5.6.14
5.6.13
5.6.12
5.6.11
5.6.10
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
5.5.3
5.5.2
5.5.1
5.5.0
5.4.3
5.4.2
5.4.1
5.4.0
5.3.3
5.3.2
5.3.1
5.3.0
5.2.2
5.2.1
5.2.0
5.1.2
5.1.1
5.0.2
5.0.1
5.0.0
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.2.0
2.1.2
2.1.1
7.0.0
6.7.0
6.6.2
6.6.1
6.6.0
6.5.4
5.6.16
5.6.15
6.5.2
6.5.1
6.5.0
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU153940 - Incorrect Authorization CVE-2026-103007 |
CWE-863 | Low | 8.19.22, 9.4.7, 9.5.4 | 07.10.2026 |
SB20261007240 |
||
| #VU153939 - Inefficient Regular Expression Complexity CVE-2026-102408 |
CWE-1333 | Low | 8.19.22, 9.4.8, 9.5.5 | 07.10.2026 |
SB20261007240 |
||
| #VU153938 - Resource exhaustion CVE-2026-102404 |
CWE-400 | Low | 8.19.23, 9.4.8, 9.5.5 | 07.10.2026 |
SB20261007240 |
||
| #VU153937 - Uncontrolled Memory Allocation CVE-2026-103005 |
CWE-789 | Low | 8.19.23, 9.4.8, 9.5.5 | 07.10.2026 |
SB20261007240 |
||
| #VU153936 - Uncontrolled Recursion CVE-2026-103008 |
CWE-674 | Low | 8.19.23, 9.4.8, 9.5.5 | 07.10.2026 |
SB20261007240 |
||
| #VU153935 - Authorization Bypass Through User-Controlled Key CVE-2026-103009 |
CWE-639 | Low | 8.19.23, 9.4.8, 9.5.5 | 07.10.2026 |
SB20261007240 |
||
| #VU153934 - Allocation of Resources Without Limits or Throttling CVE-2026-102411 |
CWE-770 | Low | 8.19.23, 9.4.7, 9.5.3 | 07.10.2026 |
SB20261007240 |
||
| #VU152236 - Resource exhaustion CVE-2026-94408 |
CWE-400 | Low | 8.19.22, 9.4.7, 9.5.3 | 25.09.2026 |
SB20260925251 |
||
| #VU152235 - Resource exhaustion CVE-2026-82300 |
CWE-400 | Low | 8.19.22, 9.4.7, 9.5.4 | 25.09.2026 |
SB20260925251 |
||
| #VU152234 - Resource exhaustion CVE-2026-94398 |
CWE-400 | Low | 8.19.22, 9.4.7, 9.5.4 | 25.09.2026 |
SB20260925251 |
||
| #VU152233 - Resource exhaustion CVE-2026-94399 |
CWE-400 | Low | 8.19.22, 9.4.7, 9.5.4 | 25.09.2026 |
SB20260925251 |
||
| #VU152232 - Resource exhaustion CVE-2026-94397 |
CWE-400 | Low | 8.19.22, 9.4.7, 9.5.4 | 25.09.2026 |
SB20260925251 |