Elastic Cloud Enterprise vulnerabilities

• elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification CVE-2026-115713 7.5 HighOctober 29, 2026
• elastic cloud enterprise Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings CVE-2026-115712 4.3 MediumOctober 29, 2026
• elastic cloud enterprise Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure CVE-2026-115711 6.4 MediumOctober 29, 2026
• elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss CVE-2026-115709 8.2 HighOctober 29, 2026
• elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass CVE-2026-115708 7.2 HighOctober 29, 2026
• elastic cloud enterprise Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation CVE-2026-115707 6.4 MediumOctober 29, 2026
• elastic cloud enterprise Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation CVE-2026-115706 6.8 MediumOctober 29, 2026
• elastic cloud enterprise, cloud enterprise (ece) +1 more Elastic Cloud Enterprise Improper Authorization CVE-2025-37736 8.8 HighNovember 7, 2025
• elastic cloud enterprise (ece), cloud enterprise +1 more Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine CVE-2025-37729 9.1 CriticalOctober 13, 2025
• elastic cloud enterprise It was identified that under certain specific preconditions, an API key that was originally... CVE-2024-37282 8.1 HighJune 28, 2024
• elastic elasticsearch, cloud enterprise +1 more Elasticsearch uncontrolled resource consumption CVE-2023-31418 Fix available 7.5 HighOctober 26, 2023
• elastic cloud enterprise A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing... CVE-2022-23716 5.3 MediumSeptember 28, 2022
• elastic cloud enterprise A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive... CVE-2022-23715 6.5 MediumAugust 25, 2022
• elastic cloud enterprise In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 it was discovered that a user could... CVE-2018-3829 5.3 MediumSeptember 19, 2018
• elastic cloud enterprise Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure... CVE-2018-3828 7.5 HighSeptember 19, 2018
• elastic cloud enterprise (ece), cloud enterprise +1 more In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used... CVE-2018-3825 5.9 MediumSeptember 19, 2018