SE
Product
security
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-23612 | 8.8 | Jan 24 | Issue with whitespace in JWT roles in OpenSearch Affected: >= 2.0.0, < 2.5.0; < 1.3.8 |
| CVE-2022-35980 | 7.5 | Aug 12 | OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information Affected: >= 2.0.0.0, <= 2.1.0.0 |
| CVE-2023-23613 | 6.5 | Jan 24 | Field-level security issue with .keyword fields in OpenSearch Affected: >= 2.0.0, < 2.5.0; < 1.3.8 |
| CVE-2022-41918 | 6.3 | Nov 15 | Issue with fine-grained access control of indices backing data streams Affected: <1.3.7; >= 2.0.0, < 2.4.0 |
| CVE-2023-31141 | 5.9 | May 8 | OpenSearch issue with fine-grained access control during extremely rare race conditions Affected: >= 1.0.0, < 1.3.10; >= 2.0.0, < 2.7.0 |
| CVE-2023-45807 | 5.4 | Oct 16 | OpenSearch Issue with tenant read-only permissions Affected: < 1.3.14.0; >= 2.0.0.0, < 2.11.0.0 |
| CVE-2023-25806 | 5.3 | Mar 2 | Time discrepancy in authentication responses in OpenSearch Affected: < 1.3.9; >= 2.0.0, < 2.6.0 |
Showing 7