| CVE-2026-115713 |
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
|
7.5
Élevée
|
29 oct. 2026 |
| CVE-2026-115712 |
Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of…
|
4.3
Moyenne
|
29 oct. 2026 |
| CVE-2026-115711 |
Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise…
|
6.4
Moyenne
|
29 oct. 2026 |
| CVE-2026-115709 |
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
|
8.2
Élevée
|
29 oct. 2026 |
| CVE-2026-115708 |
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
|
7.2
Élevée
|
29 oct. 2026 |
| CVE-2026-115707 |
Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise…
|
6.4
Moyenne
|
29 oct. 2026 |
| CVE-2026-115706 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege…
|
6.8
Moyenne
|
29 oct. 2026 |
| CVE-2024-37282 |
It was identified that under certain specific preconditions, an API key that was originally created with a specific…
|
8.1
Élevée
|
28 juin 2024 |
| CVE-2022-23716 |
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the…
|
5.3
Moyenne
|
28 sept. 2022 |
| CVE-2022-23715 |
A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user…
|
Non notée
|
25 août 2022 |
| CVE-2018-3829 |
In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could scale out allocators on…
|
Non notée
|
19 sept. 2018 |
| CVE-2018-3828 |
Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability
|
Non notée
|
19 sept. 2018 |
| CVE-2017-8444 |
The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper
|
Non notée
|
28 sept. 2017 |