Login Request a demo
EC
Product
Elastic Cloud Enterprise
by Elastic · last CVE Nov 7, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 4Medium 4Low 0
Severity
All severities9Critical1High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Elastic Cloud Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-37736
8.8
0%
Nov 7
Elastic Cloud Enterprise Improper Authorization
Affected: 3.8.0 before 3.8.3; 4.0.0 before 4.0.3
CVE-2023-31418
7.5
2%
Oct 26
An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer
Affected: through 2.13.3; 3.6.0
CVE-2018-3828
7.5
1%
Sep 19
Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability
Affected: before 1.1.4
CVE-2025-37729
7.2
1%
Oct 13
Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine
Affected: 2.5.0 before 3.8.2; 4.0.0 before 4.0.2
Showing 4