Login Request a demo
EC
Product
Elastic Cloud Enterprise
by Elastic · last CVE Oct 29, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 1High 7Medium 8Low 0
Severity
All severities16Critical1High7Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Elastic Cloud Enterprise to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-37736
8.8
0%
Nov 7
Elastic Cloud Enterprise Improper Authorization
Affected: 3.8.0 before 3.8.3; 4.0.0 before 4.0.3
CVE-2026-115709
New
8.2–Oct 29
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss
Affected: 2.6.0 through 3.8.5; 4.0.0 through 4.2.0
CVE-2026-115713
New
7.5–Oct 29
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification
Affected: 4.1.0 through 4.2.0
CVE-2023-31418
7.5
2%
Oct 26
An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer
Affected: through 2.13.3; 3.6.0
CVE-2018-3828
7.5
1%
Sep 19
Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability
Affected: before 1.1.4
CVE-2026-115708
New
7.2–Oct 29
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass
Affected: 1.0.0 through 3.8.5; 4.0.0 through 4.2.0
CVE-2025-37729
7.2
1%
Oct 13
Elastic Cloud Enterprise (ECE) Improper Neutralization of Special Elements Used in a Template Engine
Affected: 2.5.0 before 3.8.2; 4.0.0 before 4.0.2
Showing 7