Login Request a demo
ES
Product
Enterprise Search
by Elastic · last CVE Dec 12, 2023
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Enterprise Search to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-22149
8.8
1%
Sep 15
Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route
Affected: before 7.14.0
CVE-2021-22148
8.8
1%
Sep 15
Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator
Affected: before 7.14.0
CVE-2020-7018
8.8
1%
Aug 18
Elastic Enterprise Search before 7.9.0 contain a credential exposure flaw in the App Search interface
Affected: before 7.9.0
CVE-2021-37940
6.8
1%
Dec 7
An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration
Affected: before 7.16.0
CVE-2023-49923
6.5
1%
Dec 12
An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents at INFO log level
Affected: 7.0.0 before 7.17.16; 8.0.0 before 8.11.2
Showing 5