| CVE-2021-22135 |
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch…
|
Not rated
|
May 13, 2021 |
| CVE-2021-22134 |
A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field…
|
Not rated
|
Mar 8, 2021 |
| CVE-2020-7021 |
Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the…
|
Not rated
|
Feb 10, 2021 |
| CVE-2021-22132 |
Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API
|
Not rated
|
Jan 14, 2021 |
| CVE-2020-7020 |
Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level…
|
Not rated
|
Oct 22, 2020 |
| CVE-2020-7019 |
In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field…
|
Not rated
|
Aug 18, 2020 |
| CVE-2020-7014 |
The fix for CVE-2020-7009 was found to be incomplete
|
Not rated
|
Jun 3, 2020 |
| CVE-2020-7009 |
Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2 contain a privilege escalation flaw if an attacker…
|
Not rated
|
Mar 31, 2020 |
| CVE-2019-7619 |
Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service
|
Not rated
|
Oct 30, 2019 |
| CVE-2019-7614 |
A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a…
|
Not rated
|
Jul 30, 2019 |
| CVE-2019-7611 |
A permission issue was found in Elasticsearch versions before 5.6.15 and 6.6.1 when Field Level Security and Document…
|
Not rated
|
Mar 25, 2019 |
| CVE-2018-17247 |
Elasticsearch Security versions 6.5.0 and 6.5.1 contain an XXE flaw in Machine Learning's find_file_structure API
|
Not rated
|
Dec 20, 2018 |
| CVE-2018-17244 |
Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests…
|
Not rated
|
Dec 20, 2018 |
| CVE-2018-3831 |
Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12 have an information disclosure issue when…
|
Not rated
|
Sep 19, 2018 |
| CVE-2018-3827 |
A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure)…
|
Not rated
|
Sep 19, 2018 |
| CVE-2018-3826 |
In Elasticsearch versions 6.0.0-beta1 to 6.2.4 a disclosure flaw was found in the _snapshot API
|
Not rated
|
Sep 19, 2018 |