OP
Vendor
opensearch-project
6
CVEs
0
On KEV
0
New 30D
Products
DA7.4
data-prepper
opensearch-project
2 CVEs0 on KEV0 new
OB5.4
observability
opensearch-project
1 CVEs0 on KEV0 new
RE5.4
reporting
opensearch-project
1 CVEs0 on KEV0 new
SE5.4
security
opensearch-project
1 CVEs0 on KEV0 new
SE6.1
security-dashboards-plugin
opensearch-project
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-62371 | DA data-prepper opensearch-project | 7.4 | Oct 15 | OpenSearch Data Prepper plugins trusts all SSL certificates by default |
| CVE-2024-55886 | DA data-prepper opensearch-project | 6.9 | Dec 12 | OpenTelemetry Logs source may lack authentication with some custom plugins |
| CVE-2024-43794 | SE security-dashboards-plugin opensearch-project | 6.1 | Aug 23 | OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect |
| CVE-2024-39900 | RE reporting opensearch-project | 5.4 | Jul 9 | OpenSearch Dashboards Reports does not properly restrict access to private tenant resources |
| CVE-2024-39901 | OB observability opensearch-project | 5.4 | Jul 9 | OpenSearch Observability does not properly restrict access to private tenant resources |
| CVE-2023-45807 | SE security opensearch-project | 5.4 | Oct 16 | OpenSearch Issue with tenant read-only permissions |