Product by Elastic

    Elastic Cloud Enterprise

    17 known vulnerabilities in Elastic Cloud Enterprise (Elastic), 0 of them actively exploited (CISA KEV).

    Key figures

    17

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Elastic Cloud Enterprise (Elastic)
    HighCVE-2023-31418

    Elasticsearch uncontrolled resource consumption

    also in 1 other product

    		7.5
    CriticalCVE-2025-37729

    Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine

    also in 1 other product

    		9.1
    HighCVE-2026-115709

    Elastic Cloud Enterprise: Link Following

    		8.2
    HighCVE-2026-115713

    Elastic Cloud Enterprise: Link Following

    		7.5
    HighCVE-2026-115708

    Elastic Cloud Enterprise: Link Following

    		7.2
    HighCVE-2025-37736

    Elastic Cloud Enterprise Improper Authorization

    also in 1 other product

    		8.8
    CriticalCVE-2024-37282

    Elastic Cloud Enterprise: Improper Authorization

    		8.1
    MediumCVE-2026-115706

    Elastic Cloud Enterprise: Authorization Bypass Through User-Controlled Key

    		6.8
    MediumCVE-2026-115711

    Elastic Cloud Enterprise: Insertion of Sensitive Information into Externally-Accessible File or Directory

    		6.4
    MediumCVE-2026-115707

    Elastic Cloud Enterprise: Insertion of Sensitive Information into Externally-Accessible File or Directory

    		6.4
    MediumCVE-2022-23715

    Elastic Cloud Enterprise: Insertion of Sensitive Information into Log File

    		6.5
    HighCVE-2018-3828

    Elastic Cloud Enterprise: Insertion of Sensitive Information into Log File

    		7.5
    MediumCVE-2018-3829

    Elastic Cloud Enterprise: Improper Authorization

    		5.3
    MediumCVE-2026-115712

    Elastic Cloud Enterprise: Incorrect Authorization

    		4.3
    MediumCVE-2018-3825

    Elastic Cloud Enterprise (ECE): Use of Hard-coded Cryptographic Key

    also in 1 other product

    		5.9
    MediumCVE-2022-23716

    Elastic Cloud Enterprise: Insertion of Sensitive Information into Log File

    		5.3
    MediumCVE-2017-8444

    Elastic Cloud Enterprise: Cleartext Transmission of Sensitive Information

    also in 1 other product

    		5.9

    All products by Elastic