EC
Product
Elastic Cloud Enterprise
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 4Low 0
Watch
Add Elastic Cloud Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37282 | 9.8 | Jun 28 | It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys… Affected: 3.0.0 before 3.7.2 |
| CVE-2025-37736 | 8.8 | Nov 7 | Elastic Cloud Enterprise Improper Authorization Affected: 3.8.0 before 3.8.3; 4.0.0 before 4.0.3 |
| CVE-2023-31418 | 7.5 | Oct 26 | An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer Affected: through 2.13.3; 3.6.0 |
| CVE-2018-3828 | 7.5 | Sep 19 | Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability Affected: before 1.1.4 |
| CVE-2025-37729 | 7.2 | Oct 13 | Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine Affected: 2.5.0 before 3.8.2; 4.0.0 before 4.0.2 |
| CVE-2022-23715 | 6.5 | Aug 25 | A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such… Affected: before 3.4.0 |
| CVE-2018-3825 | 5.9 | Sep 19 | In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters Affected: before 1.1.4 |
| CVE-2022-23716 | 5.3 | Sep 28 | A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and… Affected: before 3.1.1 |
| CVE-2018-3829 | 5.3 | Sep 19 | In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on new hosts with an invalid roles token Affected: before 1.1.4 |
Showing 9