Security
فارسی
All products

org.elasticsearch:elasticsearch

Maven · Package
41 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Elasticsearch Improper Access Control vulnerabilityCVE-2014-3120 · GHSA-MRFM-JXGF-2H6V org.elasticsearch:elasticsearch Maven High Fix reported
Elasticsearch Uncontrolled Resource Consumption VulnerabilityCVE-2024-52979 · GHSA-MM3M-5497-XGGG org.elasticsearch:elasticsearchLogging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 MavenRed Hat Medium Fix reported
Elasticsearch Uncaught Exception leading to crashCVE-2024-23449 · GHSA-PW39-F3M5-CXFC org.elasticsearch:elasticsearch Maven Medium Fix reported
Elasticsearch Vulnerable to Stack Overflow due to a Large RecursionCVE-2024-52981 · GHSA-5XM9-X7X4-4J5X org.elasticsearch:elasticsearch Maven Medium Fix reported
Elasticsearch stores private key on disk unencryptedCVE-2024-23444 · GHSA-5V8F-XX9M-WJ44 org.elasticsearch:elasticsearch Maven Medium Fix reported
Elasticsearch allocation of resources without limits or throttling leads to crashCVE-2024-43709 · GHSA-JGX4-7V3V-VWFM org.elasticsearch:elasticsearch Maven Medium Fix reported
Elasticsearch allows insertion of sensitive information into log files when using deprecated URIsCVE-2023-31417 · GHSA-99PC-69Q9-JXF2 org.elasticsearch:elasticsearchRed Hat OpenShift Container Platform 3.11/openshift3/ose-logging-elasticsearch5 MavenRed Hat Medium Fix reported
Elasticsearch Incorrect Authorization vulnerabilityCVE-2024-12539 · GHSA-5MPW-4546-2WCR org.elasticsearch:elasticsearch Maven Medium Fix reported
Improper Limitation of a Pathname to a Restricted Directory in ElasticsearchCVE-2015-3337 · GHSA-X8Q8-4HP5-463W org.elasticsearch:elasticsearch Maven Medium Fix reported
Improper Limitation of a Pathname to a Restricted Directory in ElasticsearchCVE-2015-5531 · GHSA-JJQ8-VFJQ-J6V4 org.elasticsearch:elasticsearch Maven Medium Fix reported
Improper Access Control in ElasticsearchCVE-2015-1427 · GHSA-W94P-6MHW-4QXW org.elasticsearch:elasticsearch Maven High Fix reported
Cross-site scripting in ElasticsearchCVE-2014-6439 · GHSA-8699-M855-CWQF org.elasticsearch:elasticsearchRed Hat Subscription Asset Manager/elasticsearch MavenRed Hat Medium Fix reported
Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictionsCVE-2024-23445 · GHSA-4C7Q-M7HC-PC92 org.elasticsearch:elasticsearch Maven Medium Fix reported
Elasticsearch StackOverflow vulnerabilityCVE-2024-37280 · GHSA-4Q22-422G-M4PJ org.elasticsearch:elasticsearch Maven Medium Fix reported
Elasticsearch Insertion of Sensitive Information into Log FileCVE-2023-49921 · GHSA-2HJR-VMF3-XWVP org.elasticsearch:elasticsearch Maven Medium Fix reported
Elasticsearch Uncontrolled Resource Consumption vulnerabilityCVE-2024-23450 · GHSA-W5GG-2Q56-6H4F org.elasticsearch:elasticsearchRed Hat Quay 3/quay/quay-rhel8 MavenRed Hat Medium Fix reported
Elasticsearch Incorrect Authorization vulnerabilityCVE-2024-23451 · GHSA-R3HX-QFH5-R9M7 org.elasticsearch:elasticsearchRed Hat Quay 3/quay/quay-rhel8 MavenRed Hat Medium Fix reported
Concurrent Execution using Shared Resource with Improper Synchronization in ElasticsearchCVE-2019-7614 · GHSA-JQM6-M3J3-8GG9 org.elasticsearch:elasticsearchRed Hat Decision Manager 7/elasticsearch MavenRed Hat Medium Fix reported
Improper Access Control in ElasticsearchCVE-2015-4165 · GHSA-FH5X-4J57-6Q5X org.elasticsearch:elasticsearchRed Hat Satellite 6/elasticsearch MavenRed Hat High Fix reported
Elasticsearch subject to cross site scriptingCVE-2018-3824 · GHSA-MJPC-QX7H-R8C9 org.elasticsearch:elasticsearch Maven Medium Fix reported