com.eurodyn.qlack2.fuse:qlack2-fuse-search-api (>=2.2.1, <=2.2.3), com.eurodyn.qlack2.fuse:qlack2-fuse-search-impl (>=2.2.1, <=2.2.3) +26 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.7.3)

org.elasticsearch:elasticsearch MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.eurodyn.qlack2.fuse:qlack2-fuse-search-api =2.2.1, =2.2.1, =0.1, =2.0.10, =1.0, =0.9.0-rc5-1,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +657 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.12)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2020-7020 Source advisory: OSV:GHSA-G9FW-9X87-RMRJ...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +657 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.12)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2020-7020 Source advisory: GHSA-G9FW-9X87-RMRJ...

com.erudika:para-search-elasticsearch-v5 (1.29.0), com.floragunn:search-guard-5 (>=5.6.8-19, <=5.6.8-19.1) +37 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.8)

org.elasticsearch:elasticsearch MAVEN version 5.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.erudika:para-search-elasticsearch-v5 1.29.0 - com.floragunn:search-guard-5 =5.6.8-19, =1.0.0,...

com.automattic:elasticsearch-statsd (>=2.4.2.0, <=2.4.2.1), com.floragunn:dlic-search-guard-module-dlsfls (2.4-5) +50 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (2.4.2)

org.elasticsearch:elasticsearch MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd =2.4.2.0, =2.4.2.8, =2.4.2.17, =0.0.4, =0.3.2, =0.6.2 -...

fr.jetoile.hadoop:hadoop-unit-elasticsearch (1.3), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha2) +22 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.0.0-alpha2)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.jetoile.hadoop:hadoop-unit-elasticsearch 1.3 - org.elasticsearch.plugin:analysis-icu...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=1.2.0, <=2.2.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=3.0.0, <=3.1.1) +32 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.12)

org.elasticsearch:elasticsearch MAVEN version 5.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count =1.2.0, =3.0.0, =1.2.0, =1.0....

com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings (1.2.0), com.yakaz.elasticsearch.plugins:elasticsearch-action-updatebyquery (1.3.0) +3 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.90.4)

org.elasticsearch:elasticsearch MAVEN version 0.90.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings 1.2.0 -...

com.automattic:elasticsearch-statsd (2.2.1.0), com.data-artisans:flink-training-exercises (>=0.5, <=0.6) +94 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (2.2.1)

org.elasticsearch:elasticsearch MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 2.2.1.0 - com.data-artisans:flink-training-exercises =0.5, =0...

at.molindo:esi4j (1.0.1), com.github.alexcojocaru:elasticsearch-maven-plugin (>=1.7, <=1.10) +88 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.4.0)

org.elasticsearch:elasticsearch MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j 1.0.1 - com.github.alexcojocaru:elasticsearch-maven-plugin =1.7, =2.0.3, =1.4.0,...

org.elasticsearch:elasticsearch-analysis-icu (0.18.0), org.elasticsearch:elasticsearch-cloud-aws (0.18.0) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.18.0)

org.elasticsearch:elasticsearch MAVEN version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.0 - org.elasticsearch:elasticsearch-cloud-aws...

Privilege Context Switching Error in Elasticsearch

Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain complex queries. This could result in the search disclosing the existence of documen...

org.elasticsearch:elasticsearch-analysis-icu (0.14.0), org.elasticsearch:elasticsearch-cloud-aws (0.14.0) +10 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.14.0)

org.elasticsearch:elasticsearch MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.12.1), org.elasticsearch:elasticsearch-cloud-aws (0.12.1) +10 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.12.1)

org.elasticsearch:elasticsearch MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.12.1 - org.elasticsearch:elasticsearch-cloud-aws...

com.clever-age:play2-elasticsearch (0.8.2), com.github.joschi:dropwizard-elasticsearch (0.1.1) +1 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.90.12)

org.elasticsearch:elasticsearch MAVEN version 0.90.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.clever-age:play2-elasticsearch 0.8.2 - com.github.joschi:dropwizard-elasticsearch 0.1.1 -...

com.floragunn:search-guard-5 (>=5.6.6-18, <=5.6.6-19.1), com.floragunn:search-guard-ssl (5.6.6-23) +17 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.6)

org.elasticsearch:elasticsearch MAVEN version 5.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-5 =5.6.6-18, =1.6.0, =1.6.0, =5.0.0-rc2, =9.6.0 -...

com.automattic:elasticsearch-statsd (5.6.4.0), com.erudika:para-search-elasticsearch (1.26.0) +19 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.6.4)

org.elasticsearch:elasticsearch MAVEN version 5.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 5.6.4.0 - com.erudika:para-search-elasticsearch 1.26.0 -...

com.automattic:elasticsearch-statsd (5.4.0.0), com.eurodyn.qlack2.util:qlack2-util-avail-check-elasticsearch (>=2.2.4, <=2.3.19) +74 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.4.0)

org.elasticsearch:elasticsearch MAVEN version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.automattic:elasticsearch-statsd 5.4.0.0 -...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (2.0.1), com.sindicetech.siren:siren-elasticsearch (1.3) +6 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.2.2)

org.elasticsearch:elasticsearch MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 2.0.1 -...

org.elasticsearch:elasticsearch-analysis-icu (0.18.1), org.elasticsearch:elasticsearch-cloud-aws (0.18.1) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.18.1)

org.elasticsearch:elasticsearch MAVEN version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.1 - org.elasticsearch:elasticsearch-cloud-aws...