Product by Amazon
OpenSearch
12 known vulnerabilities in OpenSearch (Amazon), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-83497 | Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination | 8.8 | |
| High | CVE-2022-31115 | Unsafe YAML deserialization in opensearch-ruby | 8.8 | |
| High | CVE-2025-9624 | OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS | 7.5 | |
| High | CVE-2022-35980 | OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information | 7.5 | |
| Medium | CVE-2023-23613 | Field-level security issue with .keyword fields in OpenSearch | 5.7 | |
| High | CVE-2023-23612 | Issue with whitespace in JWT roles in OpenSearch | 4.7 | |
| Medium | CVE-2022-41918 | Issue with fine-grained access control of indices backing data streams | 6.3 | |
| Medium | CVE-2023-23933 | Issue in Anomaly Detection with document and field level rules in numerical feature aggregations | 5.7 | |
| Medium | CVE-2023-45807 | OpenSearch Issue with tenant read-only permissions | 5.4 | |
| Medium | CVE-2022-41917 | Incorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch | 4.3 | |
| Medium | CVE-2023-31141 | OpenSearch issue with fine-grained access control during extremely rare race conditions | 4.8 | |
| Medium | CVE-2023-25806 | Time discrepancy in authentication responses in OpenSearch | 5.3 |