pkg:Maven/org.elasticsearch:elasticsearch

43 total CVEsHIGH8MEDIUM29LOW1

✅ Check your installed version

All known vulnerabilities

  • HIGH8.1CVE-2014-3120⚠ KEVElasticsearch Improper Access Control vulnerability
    from 0, < 1.4.0.Beta1
  • —CVE-2015-1427⚠ KEVImproper Access Control in Elasticsearch
    from 0, < 1.3.8
  • HIGH8.8CVE-2020-7009Improper Privilege Management in Elasticsearch
    >= 6.7.0, < 6.8.8
  • HIGH8.8CVE-2018-3831Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
    >= 5.6.0, < 5.6.12
  • HIGH8.8CVE-2020-7014Privilege Escalation Flaw in Elasticsearch
    >= 6.7.0, < 6.8.8
  • HIGH8.1CVE-2019-7611Improper Access Control in Elasticsearch
    from 0, < 5.6.15
  • HIGH7.5CVE-2023-31418Elasticsearch vulnerable to Uncontrolled Resource Consumption
    from 0, < 7.17.13
  • HIGH7.5CVE-2022-23712Improper Check for Unusual or Exceptional Conditions in Elasticsearch
    >= 8.0.0, < 8.2.1
  • HIGH7.5CVE-2015-4165Improper Access Control in Elasticsearch
    from 0, < 1.6.0
  • MEDIUM6.8CVE-2025-37731Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificates
    >= 7.0.0-alpha1, < 8.19.8
  • MEDIUM6.5CVE-2024-52979Elasticsearch Uncontrolled Resource Consumption vulnerability
    from 0, < 7.17.25
  • MEDIUM6.5CVE-2024-52980Elasticsearch Potential Node Crash due to Large Recursion in `innerForbidCircularReferences` Function
    >= 7.17.0, < 8.15.1
  • MEDIUM6.5CVE-2024-43709Elasticsearch allocation of resources without limits or throttling leads to crash
    from 0, < 7.17.21
  • MEDIUM6.5CVE-2023-46673Elasticsearch Improper Handling of Exceptional Conditions
    >= 7.0.0, < 7.17.14
  • MEDIUM6.5CVE-2023-31419Elasticsearch StackOverflow vulnerability
    >= 7.0.0, < 7.17.13
  • MEDIUM6.5CVE-2020-7019Improper privilege management in elasticsearch
    >= 7.0.0, < 7.9.0
  • MEDIUM6.5CVE-2018-17244Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
    >= 6.4.0, < 6.4.3
  • MEDIUM6.5CVE-2021-22147Exposure of sensitive information in Elasticsearch
    >= 7.11.0, < 7.14.0
  • MEDIUM6.1CVE-2018-3824Elasticsearch subject to cross site scripting
    from 0, < 5.6.9
  • MEDIUM5.9CVE-2019-7614Concurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch
    from 0, < 6.8.2
  • MEDIUM5.9CVE-2018-17247Improper Restriction of XML External Entity Reference in Elasticsearch
    >= 6.5.0, < 6.5.2
  • MEDIUM5.7CVE-2025-37727Elasticsearch: Insertion of Sensitive Information into Log File via reindex API
    >= 7.0.0, < 8.18.8
  • MEDIUM5.7CVE-2021-22144Denial of Service in Elasticsearch
    from 0, < 6.8.17
  • MEDIUM5.3CVE-2021-22137Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
    >= 7.11.0, < 7.11.2
  • MEDIUM5.3CVE-2019-7619Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
    >= 6.7.0, < 6.8.4
  • MEDIUM5.3CVE-2021-22135API information disclosure flaw in Elasticsearch
    >= 7.0.0, < 7.11.2
  • MEDIUM5.2CVE-2023-49921Elasticsearch Insertion of Sensitive Information into Log File
    from 0, < 7.17.16
  • MEDIUM4.9CVE-2024-52981Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion
    >= 7.17.0, < 7.17.24
  • MEDIUM4.9CVE-2024-23444Elasticsearch stores private key on disk unencrypted
    >= 8.0.0-alpha1, < 8.13.0
  • MEDIUM4.9CVE-2024-37280Elasticsearch StackOverflow vulnerability
    >= 8.13.1, < 8.14.0
  • MEDIUM4.9CVE-2024-23450Elasticsearch Uncontrolled Resource Consumption vulnerability
    >= 7.0.0, < 7.17.19
  • MEDIUM4.9CVE-2020-7021Insertion of Sensitive Information into Log File in Elasticsearch
    from 0, < 6.8.14
  • MEDIUM4.8CVE-2021-22132Insufficiently Protected Credentials in Elasticsearch
    >= 7.7.0, < 7.10.2
  • MEDIUM4.4CVE-2024-23451Elasticsearch Incorrect Authorization vulnerability
    >= 8.10.0, < 8.13.0
  • MEDIUM4.3CVE-2024-23449Elasticsearch Uncaught Exception leading to crash
    >= 8.4.0, < 8.11.1
  • MEDIUM4.3CVE-2022-23708Elasticsearch privilege escalation
    >= 7.16.0, < 7.17.1
  • MEDIUM4.3CVE-2021-22134Exposure of Sensitive Information to an Unauthorized Actor
    >= 7.6.0, < 7.11.0
  • MEDIUM4.1CVE-2023-31417Elasticsearch Insertion of sensitive information in audit logs
    >= 7.0.0, < 7.17.13
  • LOW3.1CVE-2020-7020Privilege Context Switching Error in Elasticsearch
    from 0, < 6.8.13
  • —CVE-2024-12539Elasticsearch Incorrect Authorization vulnerability
    >= 8.16.0, < 8.16.2
  • —CVE-2015-3337elasticsearch - security update
    from 0, < 1.4.5
  • —CVE-2014-6439Cross-site scripting in Elasticsearch
    from 0, < 1.4.0.Beta1
  • —CVE-2015-5531Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
    from 0, < 1.6.1
Maven/org.elasticsearch:elasticsearch — 43 CVEs · VulnScope