CVE-2015-1427

CVE-2015-1427 concerns Elasticsearch’s Groovy scripting engine, where dynamic scripting was enabled by default in versions before 1.3.8 (and 1.4.x before 1.4.3). The root cause is a sandbox bypass in the Groovy sandbox that allows remote attackers to execute arbitrary shell commands via a crafted...

CVE-2014-3120

CVE-2014-3120 : Elasticsearch’s default configuration prior to certain builds enables dynamic scripting, allowing remote attackers to execute arbitrary MVEL expressions and Java code via the _search source parameter. Public references indicate this enables remote code execution and constitutes a ...

CVE-2025-68390

Elasticsearch is affected by CVE-2025-68390 (CWE-770): authenticated users with snapshot restore privileges can trigger uncontrolled memory allocation, causing memory exhaustion and DoS via a crafted HTTP request. CVSSv3.1 base score 4.9 (Medium); attack vector NETWORK, privilege requirement HIGH...

CVE-2025-37727

CVE-2025-37727 affects Elasticsearch. The vulnerability involves insertion of sensitive information into log files when auditing requests to the reindex API, potentially leading to confidentiality loss under specific preconditions. The CVSS 3.1 score is 5.7 (Medium) with attack vector Adjacent, c...

CVE-2024-23444

CVE-2024-23444 affects Elastic Elasticsearch where the elasticsearch-certutil tool, used with the csr option to generate CSRs, stores the generated private key on disk unencrypted even when --pass is provided. IBM bulletin references confirm exploitation could lead to private-key exposure in affe...

CVE-2024-23450

CVE-2024-23450 describes an Elasticsearch denial of service where processing a document in a deeply nested ingest pipeline can crash the node (CWE-400). The NVD/CVSS data show CVSS v3.1 base score 7.5 (HIGH) with network attack vector and no user interaction. Connected IBM notices tie this CVE to...

CVE-2024-37280

The CVE-2024-37280 entry concerns Elasticsearch where a stack overflow can occur during document ingestion if an index template contains a dynamic field mapping of type “passthrough” (an experimental feature), potentially leading to a Denial of Service. The core details present in connected recor...

CVE-2024-23451

Summary: CVE-2024-23451 affects Elasticsearch 8.10.0 and earlier, with versions before 8.13.0 vulnerable to an incorrect API key–based authorization in Remote Cluster Security. A remote attacker with a valid API key (and using the custom transport protocol) can read arbitrary documents from a rem...

CVE-2024-52981

CVE-2024-52981 affects Elasticsearch: a recursive parser for Well-Known Text (WKT) with nested GeometryCollection objects can trigger a stack overflow, leading to DoS. Affected: Elasticsearch 7.17.0–7.17.23 and 8.0–8.15.0. Fixed in 7.17.24 and 8.15.1 or newer. CVSS/NVD indicates high impact on av...

CVE-2024-23445

CVE-2024-23445 affects Elasticsearch remote-cluster API key security model (GA 8.14.0). The issue: a cross-cluster API key that restricts index search via query or field_security and also grants replication for the same index may not enforce search restrictions during cross-cluster search, potent...

CVE-2024-12539

Elasticsearch vulnerability CVE-2024-12539: improper authorization controls could bypass Document Level Security, allowing access to documents beyond user roles. Connected sources indicate affected Elastic Stack versions (notably referenced security update 8-16-2 to 8-17-0) and a security bulleti...

CVE-2019-7611

CVE-2019-7611 is documented in IBM Tivoli Netcool Impact advisories as a vulnerability in Elasticsearch shipped with Netcool Impact. The issue arises when Field/Document Level Security is disabled and certain endpoints (_aliases, _shrink, _split) are used, allowing an attacker to bypass permissio...

CVE-2022-23708

Affected software: Elasticsearch 7.17.0 (upgrade assistant) in which upgrading from 6.x to 7.x disables built‑in protections on the security index. Vulnerable component: upgrade assistant handling the upgrade path from 6.x to 7.x. Root cause: misconfiguration of protections during upgrade allows ...

CVE-2023-31418

The CVE-2023-31418 entry concerns Elastic Elasticsearch. It describes an unauthenticated remote vulnerability in the HTTP layer where sending a moderate number of malformed HTTP requests can cause an Elasticsearch node to exit with an OutOfMemory error, i.e., uncontrolled resource consumption lea...

CVE-2023-49921

CVE-2023-49921 relates to Elasticsearch Watcher input logging: when a Watch uses the search input and the logger is set to DEBUG or finer, the search query results may be logged at DEBUG, potentially exposing raw document content. The issue was addressed by Elastic with updates to 8.11.2 and 7.17...

CVE-2021-22145

CVE-2021-22145 affects Elasticsearch 7.10.0–7.13.3 in its error reporting, allowing memory disclosure where an attacker submitting malformed queries could cause error messages to include previously used data buffer contents (e.g., documents or authentication details). The issue is documented acro...

CVE-2021-22132

Elasticsearch 7.7.0–7.10.1 exposes an information-disclosure flaw in the async search API: executed async searches cause HTTP headers to be stored, potentially allowing a user who can read the .tasks index to obtain other users’ sensitive request headers. The issue is fixed in Elasticsearch 7.10....

CVE-2021-22135

Elasticsearch CVE-2021-22135 affects versions prior to 7.11.2 and 6.8.15. The vulnerability is a document disclosure flaw in the suggester and profile API when Document and Field Level Security are enabled; the suggester/profile API are normally disabled for an index when DLS is on. Certain queri...

CVE-2023-31419

CVE-2023-31419 affects Elasticsearch via the _search API, where a crafted query string can trigger a stack-based buffer overflow, leading to denial of service. Publicly referenced materials confirm the flaw and its DoS impact, with CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Exploitatio...

CVE-2018-3831

Elasticsearch CVE-2018-3831 affects Elasticsearch Alerting and Monitoring in versions before 6.4.1 or 5.6.12. The root cause is information disclosure via the _cluster/settings API: when queried, it can leak sensitive configuration data (passwords, tokens, usernames) to an authenticated user.reme...

CVE-2018-17244

CVE-2018-17244 affects Elasticsearch Security versions 6.4.0–6.4.2 where request headers may be misapplied during concurrent authentication across AD/LDAP/Native/File realms, causing a run-as to impersonate another user and potentially access restricted information. The connected documents refere...

CVE-2026-72685

CVE-2026-72685 describes an inefficient algorithmic complexity in Elasticsearch that allows a low-privileged authenticated user, who can index documents, to submit a small crafted document causing a worker thread to be consumed for an extended period, degrading indexing availability. Affected ver...

CVE-2022-23712

Elasticsearch contains a Denial of Service vulnerability (CVE-2022-23712) that allows an unauthenticated attacker to forcefully shut down a node by sending a specifically formatted network request. Public sources consolidate that vulnerable versions are 8.0.0 through 8.2.1 (inclusive), with the i...

CVE-2015-5377

Technical details for CVE-2015-5377 are not publicly available in the provided documents. Monitor for updates; the connected sources here do not disclose affected products/versions, root cause, or fixes specific to this CVE.

CVE-2021-22146

CVE-2021-22146 affects Elastic Cloud Enterprise (ECE) where the Elasticsearch anonymous user is enabled by default in deployed clusters. The default role for this user has no privileges but could be used to glean details about the cluster. Connected sources include an OSS/DB disclosure PoC (Elast...

CVE-2021-22144

CVE-2021-22144 affects Elasticsearch Grok parser. The vulnerability is an uncontrolled recursion that enables a DoS via specially crafted Grok queries submitted by an authenticated user, potentially crashing the node. Affected versions are Elasticsearch before 7.13.3 and 6.8.17. Public references...

CVE-2020-7020

Elasticsearch vulnerability CVE-2020-7020 affects Elasticsearch versions shipped with IBM Tivoli Netcool Impact, specifically before 6.8.13 and 7.9.2. Root cause: a document disclosure flaw where Document/Field Level Security is used, causing search queries to fail to preserve security permission...

CVE-2021-22134

Elasticsearch CVE-2021-22134 affects Elasticsearch versions after 7.6.0 and before 7.11.0 when using Document or Field Level Security. Get requests on recently updated (not yet refreshed) documents may bypass permissions, potentially disclosing the existence of restricted documents/fields. Mitiga...

CVE-2024-43709

CVE-2024-43709 affects Elasticsearch. An allocation of resources without limits or throttling can cause an OutOfMemoryError and crash via a specially crafted query using an SQL function. The entry specifies a HIGH base score (7.5) with network attack vector and low attack complexity. The provided...

CVE-2021-22137

CVE-2021-22137 affects Elasticsearch: in versions before 7.11.2 and 6.8.15, a document disclosure flaw occurs when Document or Field Level Security is used. Certain cross-cluster search queries do not properly preserve security permissions, potentially allowing an attacker to determine the existe...

CVE-2020-7009

CVE-2020-7009 affects Elasticsearch across 6.7.0–6.8.7 and 7.0.0–7.6.2, with a privilege-escalation flaw in the API key/authentication flow that can elevate privileges when an attacker can generate API keys. Public docs reference this vulnerability as a flaw in the API Key service, enabling an at...

CVE-2020-7021

CVE-2020-7021 affects Elasticsearch versions before 7.10.0 and 6.8.14. When audit logging and the emit_request_body option are enabled, the Elasticsearch audit log could disclose sensitive information such as password hashes or authentication tokens. This is described in the CVE entry and echoed ...

CVE-2023-46673

CVE-2023-46673 affects Elastic Elasticsearch. Malformed scripts in the script processor of an Ingest Pipeline can cause an Elasticsearch node to crash when calling the Simulate Pipeline API, enabling a denial of service. The vulnerability is tied to the Simulate Pipeline API handling and may impa...

CVE-2023-31417

CVE-2023-31417 affects Elasticsearch where the existing audit-filtering logic fails to mask sensitive data when clients use deprecated API URIs. The consequence is that passwords and tokens could be printed in cleartext in Elasticsearch audit logs. The description notes that audit logging is disa...

CVE-2024-52979

CVE-2024-52979 : Uncontrolled Resource Consumption in Elasticsearch occurs when evaluating crafted Mustache-based search templates, potentially causing a Denial of Service by crashing the Elasticsearch node. The provided documents identify the affected software (Elasticsearch) and the underlying ...

CVE-2026-56148

CVE-2026-56148 — Elasticsearch Uncontrolled Recursion (DoS) Affected software: Elasticsearch (8.x and 9.x lines). What is vulnerable: Uncontrolled recursion in query processing that can cause excessive resource consumption, leading to denial of service on a node. Exposed to authenticated users wi...

CVE-2024-23449

CVE-2024-23449 affects Elasticsearch: versions 8.4.0 up to (but not including) 8.11.1 are vulnerable to an uncaught exception when an encrypted PDF is passed to the REST API’s attachment processor, causing the ingest node to crash. The issue does not occur with password-protected or unencrypted P...

CVE-2019-7619

CVE-2019-7619 affects Elasticsearch versions 7.0.0–7.3.2 and 6.7.0–6.8.3, where an unauthenticated attacker could use the API Key service to determine if a username exists in the native realm due to a username-disclosure flaw. The connected documents corroborate a username disclosure vulnerabilit...

CVE-2026-56149

CVE-2026-56149 affects Elasticsearch and stems from Allocation of Resources Without Limits or Throttling (CWE-770), enabling a denial of service via Excessive memory allocation when a user with privileges to manage trained models submits a crafted machine learning request. Affected versions inclu...

CVE-2020-7014

CVE-2020-7014 describes a privilege-escalation flaw in Elasticsearch where an attacker who can create an API key and also obtain an authentication token can escalate privileges by generating a token with elevated rights. Affected Elasticsearch versions span 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1, with...

CVE-2021-22147

CVE-2021-22147 affects Elasticsearch versions 7.11.0–7.13.4 where document and field level security is not applied to searchable snapshots, allowing an authenticated user to view information they are not authorized to see. The issue stems from a missing security enforcement in searchable snapshot...

CVE-2026-56144

Technical details about CVE-2026-56144 are not publicly provided in the supplied documents; no affected products, versions, or fixes are specified here. Monitor for updates in connected sources.

CVE-2019-7614

CVE-2019-7614 is a race-condition in Elasticsearch’s response headers that could let a remote authenticated attacker access another user’s header data. The CVE is described across IBM Tivoli Netcool Impact advisories and related IBM Cloud Private entries, applying to Elasticsearch shippd with Net...

CVE-2025-37731

CVE-2025-37731 affects Elasticsearch PKI realm authentication: impersonation possible via specially crafted client certificates signed by a trusted CA. Affected: Elasticsearch 7.0.x before 8.19.8, 9.0.x before 9.1.8, 9.2.x before 9.2.2. Root cause is improper authentication in the PKI realm. Impa...

CVE-2020-7019

CVE-2020-7019 affects Elasticsearch versions prior to 7.9.0 and 6.8.12. A field disclosure flaw occurs when running a scrolling search with Field Level Security: if a user runs the same query another, more privileged user recently ran, the scrolling search can leak hidden fields, potentially gran...

CVE-2024-52980

CVE-2024-52980 refers to an Elasticsearch vulnerability where a large recursion in the PatternBank.innerForbidCircularReferences function can crash a node. The issue requires a user with read_pipeline cluster privilege to trigger the condition, making it a resource-exhaustion risk (availability l...

CVE-2018-17247

Elasticsearch Security 6.5.0/6.5.1 are affected by an XXE in Machine Learning’s find_file_structure API. The root cause is an XML External Entity vulnerability when a policy allowing external network access is present in the Java Security Manager, enabling a crafted request to leak local file con...

CVE-2026-72642

The CVE notes a flaw in Elasticsearch’s native ML inference where a model operation computes a memory address from an offset without bounds checking, enabling heap corruption that can crash the inference process and potentially allow arbitrary code execution within that process. Affected configur...

CVE-2023-46674

CVE-2023-46674 applies to Elastic Elasticsearch-Hadoop, where unsafe deserialization of Java objects from Hadoop or Spark configuration properties that could be modified by an authenticated user enables arbitrary code execution on the target system. The issue is triggered when a local authenticat...

CVE-2018-3826

CVE-2018-3826 affects Elasticsearch 6.0.0-beta1 through 6.2.4. A disclosure flaw in the _snapshot API allows plain-text exposure of the access_key and security_key when these parameters are used with the API. The impact is information disclosure (confidentiality). Some connected sources reiterate...