Linux Distros Unpatched Vulnerability : CVE-2021-22137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Elasticsearch versions before 7.11.2 and 6.8.15 a document disclosure flaw was found when Document or Field Level Security is used. Search queries do not...

com.sksamuel.elastic4s:elastic4s_2.10 (>=0.90.8.0, <=0.90.8.2), com.sksamuel.elasticsearch:elasticsearch-river-neo4j (0.90.8.0) +7 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.90.8)

org.elasticsearch:elasticsearch MAVEN version 0.90.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 =0.90.8.0, =0.90.8.2 -...

com.sksamuel.elastic4s:elastic4s_2.10 (0.90.9.0), com.sksamuel.elasticsearch:elasticsearch-river-neo4j (0.90.9.0) +15 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.90.9)

org.elasticsearch:elasticsearch MAVEN version 0.90.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 0.90.9.0 -...

com.floragunn:search-guard-ssl (5.0.0-beta1-16a), org.elasticsearch.client:transport (5.0.0-beta1) +9 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (5.0.0-beta1)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-beta1-16a - org.elasticsearch.client:transport...

com.github.tlrx:elasticsearch-test (0.90.6), com.sksamuel.elastic4s:elastic4s_2.10 (0.90.6.0) +9 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.90.6)

org.elasticsearch:elasticsearch MAVEN version 0.90.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test 0.90.6 - com.sksamuel.elastic4s:elastic4s2.10 0.90.6.0 -...

org.eobjects.datacleaner.extensions:datacleaner-elasticsearch (2.0) potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (1.3.7)

org.elasticsearch:elasticsearch MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.eobjects.datacleaner.extensions:datacleaner-elasticsearch 2.0 Source cves: CVE-2021-22137...

be.thematchbox:abstractriver (1.0.1), ch.epfl.bbp.nlp:bluima_elasticsearch (>=1.0.0, <=1.0.1) +33 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (1.3.4)

org.elasticsearch:elasticsearch MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - be.thematchbox:abstractriver 1.0.1 - ch.epfl.bbp.nlp:bluimaelasticsearch =1.0.0, =1.5, =4.0.4,...

cn.howardliu:gear-es (>=1.0.0-release, <=1.0.1-release), cn.howardliu:gear-toolkit (1.0.1-release) +89 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (2.2.0)

org.elasticsearch:elasticsearch MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - cn.howardliu:gear-es =1.0.0-release, =1.18.0, =2.2.0.0-alpha2, =2.2.0.5, =1.0.7, =2.0.0.release,...

com.github.piltt:silky-persistence_2.10 (>=1.0.3, <=1.0.57), com.github.piltt:silky-persistence_2.11 (>=1.0.3, <=1.0.57) +3 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (1.7.6)

org.elasticsearch:elasticsearch MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.3, =1.0.3, =12.0, =12.0, =12.0, =21.5 Source cves:...

com.erudika:para-search-elasticsearch-v5 (>=1.31.2, <=1.36.0), com.floragunn:search-guard-5 (>=5.6.16-19.3, <=5.6.16-19.4) +50 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (5.6.16)

org.elasticsearch:elasticsearch MAVEN version 5.6.16 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.erudika:para-search-elasticsearch-v5 =1.31.2, =5.6.16-19.3, =5.6.16-23, =4.2, =1.1.0,...

org.elasticsearch:elasticsearch-analysis-icu (0.18.0), org.elasticsearch:elasticsearch-cloud-aws (0.18.0) +11 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.18.0)

org.elasticsearch:elasticsearch MAVEN version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.15.2), org.elasticsearch:elasticsearch-cloud-aws (0.15.2) +11 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.15.2)

org.elasticsearch:elasticsearch MAVEN version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.15.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.16.0), org.elasticsearch:elasticsearch-cloud-aws (0.16.0) +13 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.16.0)

org.elasticsearch:elasticsearch MAVEN version 0.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.0 - org.elasticsearch:elasticsearch-cloud-aws...

com.sksamuel.elastic4s:elastic4s_2.10 (1.0.3.0) potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (1.0.3)

org.elasticsearch:elasticsearch MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.sksamuel.elastic4s:elastic4s2.10 1.0.3.0 Source cves: CVE-2021-22137 Source advisory:...

org.elasticsearch:elasticsearch-analysis-icu (0.16.4), org.elasticsearch:elasticsearch-cloud-aws (0.16.4) +11 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.16.4)

org.elasticsearch:elasticsearch MAVEN version 0.16.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.4 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.17.0), org.elasticsearch:elasticsearch-cloud-aws (0.17.0) +11 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.17.0)

org.elasticsearch:elasticsearch MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.0 - org.elasticsearch:elasticsearch-cloud-aws...

com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb (1.6.2), com.github.tlrx:elasticsearch-test (0.0.7) +1 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.20.1)

org.elasticsearch:elasticsearch MAVEN version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb 1.6.2 -...

com.github.tlrx:elasticsearch-test (0.0.8), com.yakaz.elasticsearch.plugins:elasticsearch-action-updatebyquery (1.1.0) +19 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.90.0.beta1)

org.elasticsearch:elasticsearch MAVEN version 0.90.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test 0.0.8 -...

com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings (>=1.0.0, <=1.0.1) potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.90.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 0.90.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings =1.0.0, =1.0.1 Source...

com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings (1.2.0), com.yakaz.elasticsearch.plugins:elasticsearch-action-updatebyquery (1.3.0) +3 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (0.90.4)

org.elasticsearch:elasticsearch MAVEN version 0.90.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings 1.2.0 -...