OP
Vendor
OpenSearch
8
CVEs
0
On KEV
0
New 30D
Products
OD8.8
OpenSearch Dashboards
OpenSearch
3 CVEs0 on KEV0 new
OB5.4
Observability
Opensearch
2 CVEs0 on KEV0 new
OP8.8
OpenSearch
OpenSearch
2 CVEs0 on KEV0 new
OD8.7
OpenSearch Dashboards dashboards-observability plugin
OpenSearch
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84942 | OD OpenSearch Dashboards OpenSearch | 8.7 | Sep 8 | Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards |
| CVE-2026-83497 | OP OpenSearch OpenSearch | 8.8 | Aug 31 | Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination |
| CVE-2026-77811 | OD OpenSearch Dashboards dashboards-observability plugin OpenSearch | 8.7 | Aug 21 | Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards |
| CVE-2026-18420 | OD OpenSearch Dashboards OpenSearch | 8.8 | Aug 20 | RCE via Prototype Pollution in OpenSearch Dashboards |
| CVE-2026-75897 | OD OpenSearch Dashboards OpenSearch | 7.5 | Aug 18 | Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards |
| CVE-2025-9624 | OP OpenSearch OpenSearch | 7.5 | Nov 25 | OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS |
| CVE-2024-39901 | OB Observability Opensearch | 5.4 | Jul 9 | OpenSearch Observability is collection of plugins and applications that visualize data-driven events |
| CVE-2024-39900 | OB Observability Opensearch | 5.4 | Jul 9 | OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards |