Skip to content
Search-guard vulnerabilities
Newest
-
floragunn search guard flx, search-guard flx +1 more
Search Guard audit logs can contain under certain conditions user credentials
CVE-2026-4819
4.9 Medium
-
floragunn search guard flx, search-guard flx +1 more
Some management operations on data streams are not properly restricted when user does not have the necessary privileges
CVE-2026-4818
6.8 Medium
-
floragunn search guard flx, search-guard flx +1 more
Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests
CVE-2026-4799
4.3 Medium
-
floragunn search guard kibana plugin, search-guard search guard +1 more
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an...
CVE-2019-13422
6.1 Medium
-
floragunn search guard kibana plugin, search-guard search guard +1 more
Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an...
CVE-2019-13423
8.8 High
-
floragunn search guard
Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve...
CVE-2019-13421
4.9 Medium
-
floragunn search guard
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled,...
CVE-2019-13415
6.5 Medium
-
floragunn search guard
Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled,...
CVE-2019-13416
6.5 Medium
-
floragunn search guard
Search Guard versions before 23.1 had an issue that for aggregations clear text values of...
CVE-2019-13419
7.5 High
-
floragunn search guard
Search Guard versions before 21.0 had an timing side channel issue when using the internal user...
CVE-2019-13420
5.9 Medium
-
floragunn search guard
Search Guard versions before 24.0 had an issue that values of string arrays in documents are not...
CVE-2019-13418
7.5 High
-
floragunn search guard
Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names ...
CVE-2019-13417
5.3 Medium
-
search-guard search guard
The floragunn Search Guard plugin before 6.x-16 for Kibana allows URL injection for login...
CVE-2018-20698
6.1 Medium