Vendor
Opensearch-project
16 known vulnerabilities in products by Opensearch-project, 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-31115 | Unsafe YAML deserialization in opensearch-ruby | 8.8 | |
| High | CVE-2022-35980 | OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information | 7.5 | |
| High | CVE-2022-41906 | OpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF) | 7.7 | |
| Medium | CVE-2023-23613 | Field-level security issue with .keyword fields in OpenSearch | 5.7 | |
| High | CVE-2023-23612 | Issue with whitespace in JWT roles in OpenSearch | 4.7 | |
| High | CVE-2025-62371 | OpenSearch Data Prepper plugins trusts all SSL certificates by default | 7.4 | |
| Medium | CVE-2022-41918 | Issue with fine-grained access control of indices backing data streams | 6.3 | |
| Medium | CVE-2024-55886 | OpenTelemetry Logs source may lack authentication with some custom plugins | 6.9 | |
| Medium | CVE-2023-23933 | Issue in Anomaly Detection with document and field level rules in numerical feature aggregations | 5.7 | |
| Medium | CVE-2023-45807 | OpenSearch Issue with tenant read-only permissions | 5.4 | |
| Medium | CVE-2022-41917 | Incorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch | 4.3 | |
| Medium | CVE-2023-31141 | OpenSearch issue with fine-grained access control during extremely rare race conditions | 4.8 | |
| Medium | CVE-2024-43794 | OpenSearch Dashboards Security Plugin improper validation of nextUrl can lead to external redirect | 6.1 | |
| Medium | CVE-2024-39900 | OpenSearch Dashboards Reports does not properly restrict access to private tenant resources | 5.4 | |
| Medium | CVE-2023-25806 | Time discrepancy in authentication responses in OpenSearch | 5.3 | |
| Medium | CVE-2024-39901 | OpenSearch Observability does not properly restrict access to private tenant resources | 4.2 |
Products
| Security | 7 | 0 |