Advisories · Technology

Elastic Cloud Enterprise.

Every CVE that names Elastic Cloud Enterprise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115713 CVE record

CVSS 7.5 High

Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification
- Elastic Cloud Enterprise
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-115712 CVE record

CVSS 4.3 Medium

Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings
- Elastic Cloud Enterprise
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-115711 CVE record

CVSS 6.4 Medium

Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure
- Elastic Cloud Enterprise
- Information disclosure
Not analysed yet 29 Oct 2026
CVE-2026-115709 CVE record

CVSS 8.2 High

Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss
- Elastic Cloud Enterprise
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-115708 CVE record

CVSS 7.2 High

Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass
- Elastic Cloud Enterprise
- Path traversal
Not analysed yet 29 Oct 2026
CVE-2026-115707 CVE record

CVSS 6.4 Medium

Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
- Elastic Cloud Enterprise
- Information disclosure
Not analysed yet 29 Oct 2026
CVE-2026-115706 CVE record

CVSS 6.8 Medium

Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
- Elastic Cloud Enterprise
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2024-37282 CVE record

CVSS 8.1 High

Improper authorization in Elastic Cloud Enterprise
- Elastic Cloud Enterprise
- Broken access control
Not analysed yet 28 Jun 2024
CVE-2022-23716 CVE record

CVSS 5.3 Medium

Sensitive information in log files in Elastic Cloud Enterprise
- Elastic Cloud Enterprise
- Information disclosure
Not analysed yet 28 Sept 2022
CVE-2022-23715 CVE record

Sensitive information in log files in Elastic Cloud Enterprise
- Elastic Cloud Enterprise
- Information disclosure
Not analysed yet 25 Aug 2022
CVE-2018-3829 CVE record

Improper authorization in Elastic Cloud Enterprise
- Elastic Cloud Enterprise
- Broken access control
Not analysed yet 19 Sept 2018
CVE-2018-3828 CVE record

Sensitive information in log files in Elastic Cloud Enterprise
- Elastic Cloud Enterprise
- Information disclosure
Not analysed yet 19 Sept 2018
CVE-2017-8444 CVE record

Cleartext transmission of sensitive information in Elastic Cloud Enterprise
- Elastic Cloud Enterprise
- Weak cryptography or TLS
Not analysed yet 28 Sept 2017