Advisories · Technology

Elastic Cloud Enterprise (ECE).

Every CVE that names Elastic Cloud Enterprise (ECE) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-37736 CVE record

CVSS 8.8 High

Elastic Cloud Enterprise Improper Authorization
- Elastic Cloud Enterprise (ECE)
- Broken access control
Not analysed yet 7 Nov 2025
CVE-2025-37729 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine
- Elastic Cloud Enterprise (ECE)
- Code injection
Not analysed yet 13 Oct 2025
CVE-2018-3825 CVE record

Hard-coded cryptographic key in Elastic Cloud Enterprise (ECE)
- Elastic Cloud Enterprise (ECE)
- Hard-coded credentials
Not analysed yet 19 Sept 2018