| CVE-2026-115713 |
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-115712 |
Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of…
|
4.3
Medium
|
Oct 29, 2026 |
| CVE-2026-115711 |
Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise…
|
6.4
Medium
|
Oct 29, 2026 |
| CVE-2026-115709 |
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
|
8.2
High
|
Oct 29, 2026 |
| CVE-2026-115708 |
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
|
7.2
High
|
Oct 29, 2026 |
| CVE-2026-115707 |
Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise…
|
6.4
Medium
|
Oct 29, 2026 |
| CVE-2026-115706 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege…
|
6.8
Medium
|
Oct 29, 2026 |
| CVE-2024-37282 |
It was identified that under certain specific preconditions, an API key that was originally created with a specific…
|
8.1
High
|
Jun 28, 2024 |
| CVE-2022-23716 |
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the…
|
5.3
Medium
|
Sep 28, 2022 |
| CVE-2022-23715 |
A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user…
|
Not rated
|
Aug 25, 2022 |
| CVE-2018-3829 |
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on…
|
Not rated
|
Sep 19, 2018 |
| CVE-2018-3828 |
Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability
|
Not rated
|
Sep 19, 2018 |
| CVE-2017-8444 |
The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper
|
Not rated
|
Sep 28, 2017 |