Known vulnerabilities in Elasticsearch - page 2

Software: Elasticsearch
Software CPE: cpe:2.3:a:elastic_stack:elasticsearch:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Elasticsearch Elasticsearch is affected by 53 known vulnerabilities: 2 high, 26 medium, 25 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108114 - Resource exhaustion
CVE-2024-52979
CWE-400 Medium
No
No
7.17.25, 8.16.0 01.05.2025 SB2025050126
SB2025121138
SB2026041711
#VU107230 - Uncontrolled Recursion
CVE-2024-52981
CWE-674 Medium
No
No
7.17.24, 8.15.1 08.04.2025 SB2025040888
SB2025063009
SB2026041729
#VU107229 - Resource exhaustion
CVE-2024-52980
CWE-400 Medium
No
No
8.15.1 08.04.2025 SB2025040888
SB2025063009
SB2025120239
and 1 more
#VU103109 - Resource exhaustion
CVE-2024-43709
CWE-400 Medium
No
No
7.17.21, 8.13.3 21.01.2025 SB2025012117
SB2025041654
SB2025063009
#VU101819 - Improper Authorization
CVE-2024-12539
CWE-285 Low
No
No
8.16.2 18.12.2024 SB2024121809
#VU95145 - Cleartext Storage of Sensitive Information
CVE-2024-23444
CWE-312 Low
No
No
7.17.23, 8.13.0 01.08.2024 SB2024080141
SB2024112711
SB2024112732
and 6 more
#VU91270 - Uncaught Exception
CVE-2024-37280
CWE-248 Low
No
No
8.14.0 07.06.2024 SB2024060703
SB2024100410
#VU91269 - Permissions, Privileges, and Access Controls
CVE-2024-23445
CWE-264 Medium
No
No
8.14.0 07.06.2024 SB2024060703
SB2025063009
#VU91267 - Improper Authorization
CVE-2024-23451
CWE-285 Low
No
No
8.13.0 07.06.2024 SB2024060702
SB2024061114
SB2024100404
#VU91266 - Uncaught Exception
CVE-2024-23449
CWE-248 Low
No
No
8.11.1 07.06.2024 SB2024060701
#VU91263 - Information Exposure Through Log Files
CVE-2023-49921
CWE-532 Low
No
No
7.17.16, 8.11.2 06.06.2024 SB2024060639
#VU87905 - Resource Management Errors
CVE-2024-23450
CWE-399 Medium
No
No
7.17.19, 8.13.0 28.03.2024 SB2024032832
SB2024071514
SB2024071817
and 6 more
#VU83419 - Improper input validation
CVE-2023-46673
CWE-20 Medium
No
No
7.17.14, 8.10.3 22.11.2023 SB2023112219
SB2024020228
SB2024021438
and 3 more
#VU81073 - Resource exhaustion
CVE-2023-31418
CWE-400 Medium
No
No
7.17.13, 8.9.0 22.09.2023 SB2023092233
SB2024020704
SB2024071610
and 2 more
#VU80874 - Stack-based buffer overflow
CVE-2023-31419
CWE-121 Medium
Available
No
7.17.13, 8.9.1 19.09.2023 SB2023091904
SB2023112014
SB2024020625
and 3 more
#VU80623 - Information Exposure Through Log Files
CVE-2023-31417
CWE-532 Low
No
No
7.17.13, 8.9.2 11.09.2023 SB2023091162
SB2023122810
SB2024020625
and 2 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370
CWE-674 Medium
No
No
7.17.11, 8.8.2 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU54639 - Resource exhaustion
CVE-2021-22144
CWE-400 Medium
No
No
6.8.17, 7.13.3 09.07.2021 SB2021070907
SB2022092102
SB2022101973
and 2 more
#VU51712 - Improper preservation of permissions
CVE-2021-22137
CWE-281 Low
No
No
6.8.15, 7.11.2 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 2 more
#VU51710 - Permissions, Privileges, and Access Controls
CVE-2021-22135
CWE-264 Low
No
No
6.8.15, 7.11.2 25.03.2021 SB2021032502
SB2021092812
SB2022072066
and 1 more


Showing elements 21 - 40 out of 53