Skip to contentElastic Cloud Enterprise vulnerabilities
- elastic cloud enterpriseImproper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data ModificationCVE-2026-1157137.5 High
- elastic cloud enterpriseIncorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform SettingsCVE-2026-1157124.3 Medium
- elastic cloud enterpriseInsertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential DisclosureCVE-2026-1157116.4 Medium
- elastic cloud enterpriseImproper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data LossCVE-2026-1157098.2 High
- elastic cloud enterpriseImproper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication BypassCVE-2026-1157087.2 High
- elastic cloud enterpriseInsertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege EscalationCVE-2026-1157076.4 Medium
- elastic cloud enterpriseAuthorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege EscalationCVE-2026-1157066.8 Medium
- elastic cloud enterprise, cloud enterprise (ece) +1 moreElastic Cloud Enterprise Improper AuthorizationCVE-2025-377368.8 High
- elastic cloud enterprise (ece), cloud enterprise +1 moreElastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template EngineCVE-2025-377299.1 Critical
- elastic cloud enterpriseIt was identified that under certain specific preconditions, an API key that was originally...CVE-2024-372828.1 High
- elastic cloud enterpriseA flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing...CVE-2022-237165.3 Medium
- elastic cloud enterpriseA flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive...CVE-2022-237156.5 Medium
- elastic cloud enterpriseIn Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could...CVE-2018-38295.3 Medium
- elastic cloud enterpriseElastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure...CVE-2018-38287.5 High
- elastic cloud enterprise (ece), cloud enterprise +1 moreIn Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used...CVE-2018-38255.9 Medium
- elastic cloud enterpriseThe client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt...CVE-2017-84445.9 Medium