What’s Vulnerable › Products

Elastic Cloud Enterprise vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Elastic Cloud Enterprise version is affected

Latest Elastic Cloud Enterprise vulnerabilities

• CVE-2026-115713 — Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification (CVSS 7.5)
• CVE-2026-115712 — Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings (CVSS 4.3)
• CVE-2026-115711 — Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure (CVSS 6.4)
• CVE-2026-115709 — Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss (CVSS 8.2)
• CVE-2026-115708 — Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass (CVSS 7.2)
• CVE-2026-115707 — Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation (CVSS 6.4)
• CVE-2026-115706 — Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation (CVSS 6.8)
• CVE-2025-37736 — Elastic Cloud Enterprise Improper Authorization (CVSS 8.8)
• CVE-2025-37729 — Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine (CVSS 7.2)
• CVE-2024-37282 — (CVSS 9.8)
• CVE-2023-31418 — Elasticsearch uncontrolled resource consumption (CVSS 7.5)
• CVE-2022-23716 — (CVSS 5.3)
• CVE-2022-23715 — (CVSS 6.5)
• CVE-2018-3829 — (CVSS 5.3)
• CVE-2018-3828 — (CVSS 7.5)
• CVE-2018-3825 — (CVSS 5.9)