Skip to content
Opensearch vulnerabilities
Newest
-
opensearch dashboards, aws amazon opensearch service +1 more
Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
CVE-2026-84942
6.3 Medium
-
opensearch, amazon opensearch service, aws amazon opensearch service +2 more
Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination
CVE-2026-83497
8.7 High
-
aws amazon opensearch service, opensearch dashboards dashboards-observability plugin +1 more
Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
CVE-2026-77811
6.2 Medium
-
opensearch dashboards, aws amazon opensearch service +1 more
RCE via Prototype Pollution in OpenSearch Dashboards
CVE-2026-18420
8.7 High
-
opensearch dashboards, aws amazon opensearch service +1 more
Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
CVE-2026-75897
8.7 High
-
aws opensearch
SQL Query Validation Bypass in OpenSearch Direct Query
CVE-2026-18428
8.7 High
-
aws opensearch
Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
CVE-2026-18952
8.6 High
-
aws opensearch
Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
CVE-2026-19311
8.6 High
-
amazon opensearch
OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS
CVE-2025-9624
Fix available
8.3 High
-
lf projects opensearch
dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2...
CVE-2024-54160
Public exploit
6.4 Medium
-
opensearch-project reporting, opensearch observability +1 more
OpenSearch Dashboards Reports does not properly restrict access to private tenant resources
CVE-2024-39900
Fix available
5.4 Medium
-
opensearch observability
OpenSearch Observability does not properly restrict access to private tenant resources
CVE-2024-39901
Fix available
4.2 Medium
-
amazon opensearch
Incorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch
CVE-2022-41917
4.3 Medium