EC
Product
Elastic Cloud ON Kubernetes
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 1
Watch
Add Elastic Cloud ON Kubernetes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7010 | 7.5 | Jun 3 | Elastic Cloud on Kubernetes (ECK) versions prior to 1.1.0 generate passwords using a weak random number generator Affected: before 1.1.0 |
| CVE-2026-72640 | 6.5 | Aug 13 | Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure Affected: before 3.5.0 |
| CVE-2026-72648 | 6.5 | Aug 13 | Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure Affected: 3.0.0 before 3.5.0 |
| CVE-2026-78609 | 5.4 | Sep 2 | Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of Data Affected: 2.6.0 before 3.5.0 |
| CVE-2023-31416 | 5.3 | Oct 26 | Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0 Affected: before 2.8 |
| CVE-2026-78600 | 3.5 | Sep 2 | Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential Retention Affected: 2.6.0 before 3.5.0 |
Showing 6